In 2024, we introduced the Accepted Behavior feature to our XDR products, which introduced Suppression Rules.
Suppression rules help reduce noise by automatically closing detections that are known to be acceptable.
However, to avoid creating blind spots, it’s important to routinely review older rules, confirm they still reflect current business reality, and update or disable them when needed.
This article explains why regular reviews matter, how the portal highlights older rules, and how to maintain an effective and compliant suppression rule set over time:
https://community.withsecure.com/announcements-en/kb/articles/32928-reviewing-and-updating-xdr-suppression-rules
