CONTAP-494849: RFE: Better handle ARP recurring false and true positives
Issue
This request for enhancement represents some customers' request to engineering to enhance the reporting of recurring false and true positives.
The goal is:
- For true positives: report attacks faster on extensions that were already marked as malicious before.
- For false positives: do not report attack for files extensions that were already declared false-positive multiple times in the past by matching the byte pattern of previously cleared files.
