Email confirmation:

[M.Mustaqeem]

Hello Everyone,

When we request the Palo Alto team to review or change the category of an executable that is already been tagged as 'Malware' , why don't we receive an email confirmation from the platform acknowledging the receipt or change of the case.

Thanks

[aspatil]

Hello @M.Mustaqeem ,

Can you confirm ,how are you submitting the request?

[M.Mustaqeem]

Hello @aspatil ,
in the Cortex Portal by going to,
Keys Assets & artifacts > Wildfire Analysis and reports > Report Verdict as Incorrect > changing the status from Malware to Benign. 

[aspatil]

Hello @M.Mustaqeem ,

If you are performing the mentioned action:
The threat team will perform further analysis of the sample to determine whether it should be reclassified. If a malware sample is determined to be safe, the signature for the file is disabled in an upcoming antivirus signature update. If a benign file is determined to be malicious, a new signature is generated. After the investigation is complete, you will receive an email describing the action that was taken.

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Documentation/Review-WildFire-analy...

If you see action was taken and you haven't receive an email, please feel free to reach out to TAC and get the explanation from Engineering.

If you feel this has answered your query, please let us know by clicking like and  on "mark this as a Solution". Thank you.

Regards,

Ashutosh