Hello. Which is the best way to send you false positives for examination? There are system files that ransomware protection assumes them as they are hit by ransomware.
At this moment we gathered enough false-positive examples from our clients. All of that data will be used for the fix that is coming with version 5.9(no ETA, but it will be released soon)
After 5.9 is released we'll monitor the behavior of this feature and request false-positive examples if needed.