Submit false positive samples

Prev Next

When you receive false positive samples, submit it for analysis.

  1. Download the sample.

    1. Click ManageTIS ConfigurationTIS Users.

    2. Select the user, then click Edit.

    3. Select Sample Download Access, then click Save.

    4. Click AnalysisAnalysis Reports.

    5. Click the Reports icon, then select Original Sample.

    6. Save the .zip file on your computer.

  2. Log on to the Intelligent Sandbox web interface.

  3. Click AnalysisAnalysis Reports.

  4. Click the Reports, then select Analysis Summary.

  5. Locate Engine Analysis, then determine where to submit the sample:

    • GTI File Reputation — Submit the file as a Service Requests or to the URL reputation team.

      • To submit a file sample, go to https://supportm.trellix.com, select Service Requests, then submit the false positive file sample.

      • To submit an URL sample, go to http://www.trustedsource.org, then submit the false positive URL.

    • Gateway Anti-Malware — Submit the sample to the Gateway Anti-Malware team.

      • Submit by email — Send an email to malware_research_gateway@trellixsecurity.com, attach the false positive sample, then enter Possible False as the subject.

      • Submit by service request — Go to https://supportm.trellix.com, select Service Requests, then submit the false positive sample.

    • Anti-Malware — Go to https://supportm.trellix.com, select Service Requests, then submit the false positive sample.

    • Sandbox — Go to https://supportm.trellix.com, select Service Requests, then submit the false positive sample.