The alerts are generated when the user that is associated with an application or process changes during the course of execution to something other than NT AUTHORITY\SYSTEM, the system tracks the username of system/root to another user
Resolution
Avoid these results with running the application with the System/Root user (NT AUTHORITY\SYSTEM).
If these are believed to be false positives in the environment, they could be dismissed using the following method here.