Question

You are a cybersecurity analyst using a Security Information and Event Management $($SIEM$)$ system. You notice the SIEM is flooding your team with too many alerts, many of which are false positives. You decide to adjust the SIEM settings to improve its efficiency. What is the BEST first step to reduce false positives from the SIEM system?

A$.$Turn off all low$-$priority alerts

B$.$Adjust the SIEM's alert thresholds and rules based on past false positives

C$.$Increase the SIEM's log storage

D$.$Conduct more cybersecurity training for employees