The signature number was 14081197 and it was updated on the 10th around 2300 UTC. Hope that helps. -Matt

The signature has been removed to be re-evaluated, so once signatures update on your endpoints, the FP should be resolved.

I've requested an update from TALOS and also stressed the priority. If you haven't, please open a TAC case as this will help with the prioritization.

TALOS is investigating for a potential FP.

Good morning. Yes, it was determined to be a False Positive. Apologies for the delay on the update, the resolution came after I was out for the day.  -Matt