False positives
False positives cost analyst time and, far more expensively, credibility.
A tool with a reputation for crying wolf gets ignored, including on the occasion it is right. That is the real damage: not the wasted hours, but the learned response of dismissing its output. Tuning is therefore not housekeeping, it is what keeps the tool capable of being believed.
Checked against the primary source.
