Hi,
I have multiple Linux VMs that run packet captures daily, and I use Vision One for monitoring. I've noticed that many Workbench alerts are triggered whenever these PCAPs run, which is generating a lot of noise.
Is there a way to suppress these alerts while ensuring that other important detections remain unaffected? Any best practices or recommended configurations would be greatly appreciated.
Thanks!