How Do You Get Better at Identifying True Positives vs False Positives in Threat Hunting?

I’m getting into threat hunting and one area I’m struggling with is distinguishing genuinely malicious/suspicious activity from normal behavior. For example, when investigating an unknown process, hash, IP, or domain, how do you determine whether it’s actually a true positive or just benign/false positive activity?
Are there any good resources, labs, methodologies, or practical guides that helped you build this intuition and get better at identifying unusual behavior?

reddit.com
u/Federal_Manager3700 — 13 days ago

A clinic in Bangalore filed a defamation case on me for leaving a negative review

I posted a Google review after my consultation (summary: ₹500 consultation, no prescription or treatment plan, then I was quoted ₹18,000 without a clear explanation of what the treatment included). Based on that review, I received a legal notice demanding ₹5,000 in damages, a written apology, and deletion of the review. It also says that if I don’t comply, they’ll file an FIR for defamation. They even had an attachment saying that they had a guy apologise to the doctor on the newspaper. I can’t believe that a small review i sent warranted such a huge notice.
I did not leave any false review, simply stated my experience, no slangs or slurs, i used a ChatGPT generated review. So it was very professional. I don’t see why this is defamation.

I’m just starting my career and I’m worried whether something like this could affect future background verification or my employment. I’ve deleted the post because i panicked and i think i need to reply to the notice or they will file a lawsuit. I don’t want to apologise or pay 5000. I’ve deleted the post, and i was wondering if this resolves it.

Should I send a notice back? I’d prefer not to escalate things by sending a counter-notice unless absolutely necessary. What would be the best course of action?

reddit.com
u/Federal_Manager3700 — 30 days ago

Saw this at my office. What should I do?

I recently joined a company in Bangalore, nobody shows up to office, even on my first day, i was the only one here. Everybody works from home because headquarters of the company is elsewhere. I’ve been going to office as expected, and everytime i use this washroom it’s extremely disturbing. Weird thing is I didn’t notice this on my first day, i noticed the day after i joined and as soon as I entered after looking at this piece of work, there was a strong piss stench. It’s weird because I was literally the only female employee in office that day. There’s only one toilet inside, a mirror and a sink. I feel extremely unsafe and i hope there are no cameras inside the washroom. There are no female employees who come to office regularly except me. It’s just a security, a senior HR (who’s extremely awkward and doesn’t look me in the eye, point is I don’t think i can talk to him about this, he seems like an innocent guy), there are couple of guys who manage the pantry and overall office maintenance (not sure if they clean toilets, but i know for a fact these two are the only cleaning staff so I’m guessing they clean washrooms too)
I finally met two female employees who came after 2 months of not coming to office, and one of them told me that the washroom never worked here and there was no proper lock to the door, just overall poorly maintained. Right now, the washroom condition is clean enough, flush is a little faulty but i think it’s alright). I told one of the female employee that the sign is too disturbing, she went to the washroom to check it and started laughing??? I didn’t know how to react to that, i was too stunned to say anything.
I’m not sure who to bring this up to, my onboarding was done by an intern virtually from HQ, all HRs are in the HQ office. I think this guy is the only HR who’s even in the Bangalore office, and I’m not sure if i can rely on him.
I could take wfh, but bringing this up with manager is very awkward and i recently joined, so I’m not sure if asking for wfh is the right thing to do as of now.

u/Federal_Manager3700 — 2 months ago