List at least three specific adjustments to the rule design that reduce false positives. For each, explain the type of legitimate behavior it protects against.