I find that the Security Analytics module provides so much information that is is very difficult to identify a legitimate attack. I would like the software to be able to alert admins to a threat, but with this many "threats" being detected, I can't see how this information could possibly be used to resolve an issue. 

 

How do you best use the ASAM module to identify legitimate threats, and be alerted to them.

Thanks

Robert.