Cylance virus scan issue

[Mike Trotter]

We've recently started using Cylance Protect, and are having issues with SourceTree.

The threat location is indicated as: C:\Users\USERNAME\AppData\Local\Atlassian\SourceTree\git_local\usr\bin\sh.exe

Question 1 is this a false positive?

Question 2 at what folder level should we apply a scan exclusion to enable a permanent fix that will not be impacted by future upgrades?

[Nic Brough _Adaptavist_ · Accepted solution]

1. Yes, assuming it is the sh.exe distributed with Sourcetree
2. Probably the \bin level in the path you've got - stuff outside \bin should not be executable so still worth checking