Workflow for Advanced Threat Protection when a blob is scanned

Is it possible to create a logic app or function which is triggered each time Advanced Threat Protecton scans a blob for malware? I am aware of that ATP will create an alert in security center if the blob is detected as malware. However, it is hard to know if a blob has been scanned and not been flagged as malware. What i am looking for is a way to mark the blobs which have passed the malware scan done by ATP.  

Any idea\solution for achieving this under current ATP support?