If you are experiencing false positive detections with Microsoft products in Trend Vision One, it may be triggered by a specific threat source. To identify the source, follow these steps:

1. On your Vision One console, navigate to Threat > Suspicious Object Management > Suspicious Object List.
2. Search for the description 'MS-ISAC Collection' and select all Suspicious Objects (SO) with this description.
3. Click on 'Delete' to remove the SO.

By removing the Suspicious Objects associated with the 'MS-ISAC Collection' description, you can eliminate the false positive detections.