Until ACSIA is 100% sure that what has been detected is an actual threat it will not automate a response, so false positives are not possible.