About EdwardShim

Hi everyone, Apologies in advance if this has been asked, but this is my first post re: Wildfire.   We receive e-mail alerts via our SIEM when something is categorized as malicious from our PA device, but I noticed that all that is listed within the payload that tells me why it was categorized as a threat is:   "cat=THREAT"    As well as the hash which has no matches in VirusTotal.    I can tell by the sending e-mail and recipient that this is a false positive (as well as the subject line) so how can I ensure that wildfire learns this is not a threat? There is not much I can go off of in terms of the payload. I would just like to fine tune our alerts in PA/wildfire.  Thank you in advance! ... View more