Injection into system process [F0413b][C] - False positives for MSTSC.EXE

[IsuruSam 0]

I have the above detection rule creating false positives and when checked, all the detections are for MSTSC.EXE. The triggering processes are mostly the browsers (chrome.exe). All the endpoints are user PCs. Is there a way to tune this rule to stop the false positives? 

[JamesR 52]

Should be answered here: