Microsoft Defender XDR for Office 365: Streamlined false positive submissions for quarantined files

  • Home |
  • Microsoft Defender XDR for Office 365: Streamlined false positive submissions for quarantined files
Microsoft Defender Curtain Reveal Tech Bulletin Header

MC711337 · Microsoft Defender XDR, Microsoft 365 Experts

From Microsoft Corporation
Technical Bulletin MC711337 · Published Jan 30, 2024

Message Summary

In Microsoft Defender XDR for Office 365, we are providing an easy and robust way for admins and security operators to submit and temporarily mitigate false positive files that have been quarantined from OneDrive, Teams, and SharePoint.

This message is associated with Microsoft 365 Roadmap ID 380186.

When this will happen:

Standard Release: We will begin rolling out mid-February 2024 and expect to complete by mid-March 2024. 

How this will affect your organization:

These screenshots from Quarantine Defender XDR 365 for Office show how to submit false positive files to Microsoft and how to see your submissions in the queue.

Figure 1: Action button to submit false positives files:


View image in new tab

Figure 2: Review submission detail:


View image in new tab

Figure 3: Review submission confirmation:


View image in new tab

Figure 4: Submitted files can be found in the submission queue:


View image in new tab

What you need to do to prepare:

No action is needed to prepare for this change. You may want to notify your users about this change and update any relevant documentation as appropriate.

Recent Comments

No comments to show.

Recent Posts

Microsoft 365 Curtain Reveal Tech Bulletin Header
New Outlook for Windows: Auto-reading emails with Microsoft Windows Narrator
October 14, 2024
Microsoft 365 Curtain Reveal Tech Bulletin Header
(Updated) Microsoft Purview: Minor encrypted message portal design updates, URL to remain the same
October 14, 2024
Microsoft Exchange Curtain Reveal Tech Bulletin Header
(Updated) Microsoft Defender for Office 365: Tenant Allow/Block List will support IPv6 allow and block entries
October 14, 2024