Classify the following Wazuh alert as a true positive or false positive.

Alert:
{
  "timestamp": "2025-03-05T02:26:52.823+0000",
  "rule": {
    "level": 3,
    "description": "PAM: Login session opened.",
    "id": "5501",
    "mitre": {
      "id": [
        "T1078"
      ],
      "tactic": [
        "Defense Evasion",
        "Persistence",
        "Privilege Escalation",
        "Initial Access"
      ],
      "technique": [
        "Valid Accounts"
      ]
    },
    "firedtimes": 7,
    "mail": false,
    "groups": [
      "pam",
      "syslog",
      "authentication_success"
    ],
    "pci_dss": [
      "10.2.5"
    ],
    "gpg13": [
      "7.8",
      "7.9"
    ],
    "gdpr": [
      "IV_32.2"
    ],
    "hipaa": [
      "164.312.b"
    ],
    "nist_800_53": [
      "AU.14",
      "AC.7"
    ],
    "tsc": [
      "CC6.8",
      "CC7.2",
      "CC7.3"
    ]
  },
  "agent": {
    "id": "xxx",
    "name": "xxx",
    "ip": "xxx.xxx.xxx.xxx"
  },
  "manager": {
    "name": "wazuh-server"
  },
  "id": "1741141612.1604428",
  "full_log": "Mar 05 02:26:51 wazuh-server su[3136640]: pam_unix(su:session): session opened for user root(uid=0) by godentistinfraservice3nd(uid=0)",
  "predecoder": {
    "program_name": "su",
    "timestamp": "Mar 05 02:26:51",
    "hostname": "wazuh-server"
  },
  "decoder": {
    "parent": "pam",
    "name": "pam"
  },
  "data": {
    "srcuser": "godentistinfraservice3nd",
    "dstuser": "root(uid=0)",
    "uid": "0"
  },
  "location": "journald"
}

Classification: False Positive