Policies
Policies in Flare are rules that are set up to manage the flow of alerts generated by the system. They are designed to decrease the amount of alerts caused by repetitive content. Specifically, these policies help prevent sending alerts for identical market listings, forum posts, chat messages, or paste files. In other words, if two or more identical items are detected, Flare won't send repeated alerts for each one based on the active policy.
These policies help in customizing your alert preferences based on the content, source, and actor, among other parameters. By preventing alerts for identical data, they ensure a reduction in noise and redundancy, helping you stay focused on new and pertinent threats or incidents. This helps keep the alert volume manageable and avoids alert fatigue.
When enabled, this policy will prevent sending alerts for a market listing identical to another active listing. Flare considers listings to be identical when their title and contents are precisely the same, in addition to being on the same source and by the same actor. Flare considers a listing to be active if it was available to view in the last 48 hours, as estimated by the Last seen at date. This policy is meant to decrease the number of alerts caused by dark web actors constantly reposting the same content to gain more visibility.
When enabled, this policy will prevent sending alerts for a forum post identical to another forum post. Flare considers forum posts to be identical when their title and contents are precisely the same, in addition to being on the same source and by the same actor. This policy is meant to decrease the number of alerts caused by dark web actors constantly reposting the same content to gain more visibility.
When enabled, this policy will prevent sending alerts for a chat message identical to another chat message. Flare considers chat messages to be identical when their contents are precisely the same, in addition to being on the same source and by the same actor. This policy is meant to decrease the number of alerts caused by dark web actors constantly reposting the same content to gain more visibility.
When enabled, this policy will prevent sending alerts for a paste file identical to another paste file. Flare considers paste files to be identical when their contents are precisely the same, in addition to being on the same source and by the same actor. This policy is meant to decrease the number of alerts caused by files being shared repeatedly on a single paste site.