Can some kind dev fix the issue where when a file is fully downloaded AMP triggers on a signature on the file.crdownload or whatever your browser du jour decides to temp name downloads, but before AMP can act the browser renames it to the correct file.
So the quarantine failure messages have essentially become littered with this message and it's hard to digest a true failure from this without complicated SIEM rules.
