What's the best way to start the ASM in a manner to achieve security and avoid false positives

Hi;   Would starting with the Automatic policy builder with Trusted users only heavily testing the application, then stopping the policy builder after it has built what it needs to build and movin...