Marks a phishing-campaign target's recorded interaction as a false positive — e.g. a security scanner (not the employee) triggered the click or credential submission. Clears the relevant flags on the per-recipient result and decrements the campaign's aggregate statistics accordingly. Use eventType "all" (default) to clear the payload interaction (link/attachment click), the employee compromise (credential submission) and the email reply; use "employeeCompromise" to clear only the compromise and keep the click. Requires an admin role and a paid subscription.