Shield Malware Threat Detection False Positives on Excel Documents with Macros
Multiplan (160k ARR) turned on Malware Deep Scan and was getting 3-5 false positives per day because users across multiple departments often work on Excel Documents with Macros. Due to their process, users need to upload new versions of these Excel documents daily (they cannot use Version Control to handle this). So the IT team is being pinged every time a new version is added. This has been so overwhelming that the IT team has turned off Malware Detection. They will enable again if Macros are not accidentally flagged as potentially malicious.
![](https://secure.gravatar.com/avatar/f53f19143da49537b7fc6dee7f623fe0?size=40&default=https%3A%2F%2Fassets.uvcdn.com%2Fpkg%2Fadmin%2Ficons%2Fuser_70-6bcf9e08938533adb9bac95c3e487cb2a6d4a32f890ca6fdc82e3072e0ea0368.png)
The team is evaluating the current model supporting Deep Scan to understand ways to improve detection on Microsoft file types.
-
Anonymous commented
This is a major issue for one of my customers. This will require a lot of time manually updating notifications moving forward. Please consider this a priority. Thank you!
-
Sean commented
It's 2024 - any news on this? It would seem helpful to have a way to control by confidence level and or category of concern. We are finding many XLSM listed as unknown malicious through deep scan.