Thanks,
Not sure if we can during Security Checkup.
I have one more candidate for false-positives: "Repetitive SMB Rename Command Attempts" flagging MS Teams actions all the time.
I have observed the behavior in Teams, when trying to attach an identical file to a different conversation, Teams overrides the previously uploaded one.
Additionally, there are background actions in Teams cache that are causing repetitive renames.
So we are frequently encountering:
Especially when dealing with redirected folders or network shares in Teams.