Views:

The false positive detections are triggered because MS-ISAC Collection has been added in the Suspicious Objects list.

To resolve this:

  1. Log in to your Trend Vision One console and navigate to Threat > Suspicious Object Management > Suspicious Object List.
  2. Search for 'MS-ISAC Collection' and select all Suspicious Objects (SO) with this description.
  3. Click on 'Delete' to remove the SO.