lsass.exe infection found by Anti-Malware. Unable to exclude

[ED]

Hi everyone,

This is the situation. Endpoint security finds lsass.exe as an infection and cures it when RDP to a server. 

I have tried to exclude but it doesn't help

Any suggestions and also why does it react like this for RDP? Low confidence and low severity. 

[Kobie_Bendalak]

Please raise a TAC ticket to have it investigated, seems like an FP.