A customer is reporting difficulty using Box Shield’s Anomalous Download detection due to how downloads are currently defined when Box Drive is in use. Box Shield flags a “download” whenever a user expands or opens a folder in Box Drive. As a result, routine navigation actions are recorded as downloads, creating noise in the anomaly signals. The customer is asking whether anomalous download detection can be refined to trigger only on intentional file downloads (e.g., explicit download actions), rather than folder expansion or passive access via Box Drive.