FireEye: Reporting False Positives or Requesting Software Exlusions


This is only for members of the University of Maryland community, users outside of UMD please contact FireEye support directly.

In certain circumstances FireEye may mark a program as malicious and quarantine a file for a program that is not malicious. For example, many third party software update functions behave similarly to malware that is attempting to modify a program.

If this happens you can reach out to the Division of IT Security Consulting group who can mark the program as a false positive and have any quarantined files restored. FireEye's default procedure is to quarantine a file and not delete it.

Send an email with the following information to ITSec-Consulting@umd.edu.

  1. Machine Name.
  2. Name of program in question.
  3. File name and location with the full folder path.