Is the FP local analysis verdict of the executable being resolved on the back-end once the WF sample analysis is completed? False positives should be resolved in an automated fashion with the sample being uploaded to WF and Analysed. The turn-around time on this would depend on your ESM settings and network connectivity of course. Are you finding you have to manually set as "Benign" in Hash Control?
... View more