# Alert treatment

## How does Inopli perform verification and treatment of false positives during the alert analysis process?

<mark style="color:$success;">**Inopli’s**</mark> false positive validation process is based on a pre-training phase known as *low-rank adaptation*, which uses documented rule definitions, previously handled incidents (human or automated), and SIEM alert characteristics to improve contextual accuracy.

During the alert handling process, Inopli evaluates and classifies each case according to learned patterns and operational feedback. Once the analysis is completed, the final disposition — including whether the alert was confirmed or dismissed as a false positive — is automatically recorded and made visible through the Alert Management Dashboard, where analysts and managers can track outcomes, recurrence, and quality of classification.

##


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.inopli.com/faq/alert-treatment.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.