False Positive alarts RRS feed

  • Question

  • HI,

    I am getting false positive alerts from SCCM for endpoint even the Malware got Quarantine and Succeeded.

    How to disable / Stop this false positive alerts.

    Tuesday, December 4, 2018 5:32 PM

All replies

  • Hi,

    If you have a file which you suspect is either an FP or FN you can submit that through the File Submission portal which will open when pressing the “Send Feedback” button. The file submission portal supports files for ASR, NP, PUA and suspected malware anything else should be submitted as a “Problem”



    Heike Ritter ☁ IT Pro Evangelist

    Wednesday, December 5, 2018 8:00 PM