The false positive detections are triggered because MS-ISAC Collection has been added in the Suspicious Objects list.
To resolve this:
- Log in to your Trend Vision One console and navigate to Threat > Suspicious Object Management > Suspicious Object List.
- Search for 'MS-ISAC Collection' and select all Suspicious Objects (SO) with this description.
- Click on 'Delete' to remove the SO.