VENDOR APPEAL GUIDE
Cylance false positive?
Here’s where to start.
Arctic Wolf acquired Cylance endpoint-security assets. VirusTotal now lists an Arctic Wolf contact for file-engine issues.
Appeal contacts
Choose a channel for the type of detection you want reviewed. Contact availability and acceptance are controlled by the vendor.
Arctic Wolf VirusTotal file contact[email protected] · File↗
Source: VirusTotal contact listing · Listed route; submission not tested
How to request a review
File review
Arctic Wolf acquired Cylance endpoint-security assets. VirusTotal now lists an Arctic Wolf contact for file-engine issues.
- Email the Arctic Wolf address listed by VirusTotal and identify Cylance as the historical engine name.
- Include the file SHA-256, VirusTotal report URL, detection details and the file's legitimate purpose.
- Ask whether the current endpoint team can review the legacy detection.
- This record preserves the historical Cylance name; it does not assert that Cylance remains a separately active VirusTotal engine.
- The listed mailbox has not been delivery-tested.
Scope & contact notes
- Listed in VirusTotal search-prefix documentation but absent from the contributor roster snapshot; this is not proof the engine is currently active.
- This name appears in a VirusTotal engine-prefix list or contact table but is not matched to a current contributor entry. Current engine activity is unconfirmed.
Names you may see in a report
Cylancecylance
Aliases help locate the responsible vendor. Related products can use different submission channels; check the scope shown above.
Sources for this entry
- VirusTotal file engine prefixes ↗
- Arctic Wolf closes acquisition of Cylance assets ↗
- VirusTotal False Positive Contacts ↗
“Guidance checked” means a public vendor source supports the route or instructions. We have not sent a test appeal or verified mailbox delivery. Read our methodology.