https://live.paloaltonetworks.com/t5/general-topics/analytics-bioc-tune/m-p/1255189#M126522 <P>Hi,</P> <P>I'm trying to suppress false positives from native XDR Analytics BIOC detections (e.g. "Rare RDP session to a remote host") for specific machines in XSIAM 3.5.</P> <P>The documentation mentions Issue Exclusions under Exception Configuration, but I only see:</P> <UL> <LI>IOC/BIOC Suppression Rules</LI> <LI>Disable Injection and Prevention</LI> <LI>Disable Prevention Rules</LI> </UL> <P>Where is the Issue Exclusions feature in XSIAM 3.5? Is there another way to tune these detections?</P> <P>Thanks in advance.</P> Tue, 02 Jun 2026 09:43:09 GMT H.Eldessouki 2026-06-02T09:43:09Z https://live.paloaltonetworks.com/t5/general-topics/analytics-bioc-tune/m-p/1255189#M126522 <P>Hi,</P> <P>I'm trying to suppress false positives from native XDR Analytics BIOC detections (e.g. "Rare RDP session to a remote host") for specific machines in XSIAM 3.5.</P> <P>The documentation mentions Issue Exclusions under Exception Configuration, but I only see:</P> <UL> <LI>IOC/BIOC Suppression Rules</LI> <LI>Disable Injection and Prevention</LI> <LI>Disable Prevention Rules</LI> </UL> <P>Where is the Issue Exclusions feature in XSIAM 3.5? Is there another way to tune these detections?</P> <P>Thanks in advance.</P> Tue, 02 Jun 2026 09:43:09 GMT https://live.paloaltonetworks.com/t5/general-topics/analytics-bioc-tune/m-p/1255189#M126522 H.Eldessouki 2026-06-02T09:43:09Z