Scenarios Examples

False positives are a common challenge in cybersecurity. Often, some detections are too generic and when broadly applied, could have a tendency to block more things than necessary. Users are sometimes forced to disable entire detections to avoid these issues - but with Contextal Platform, you can handle these cases with precision, see how!

Contextal Platform is built with resiliency at its core. It utilizes dedicated data processors, which are independent and isolated services. A failure in a data processor, potentially signalling an attack on the system, is treated as an indicator, on which you can act with ContexQL!

While Contextal Platform collects information from malware scanners, it does not, by default, take any direct actions on infected objects. Instead, it leaves the decision to users on how to handle detected malware. In this article, we will demonstrate an example scenario that can be deployed to block malicious objects.