Microsoft Defender XDR for Office 365: Streamlined false positive submissions for quarantined files

In Microsoft Defender XDR for Office 365, we are providing an easy and robust way for admins and security operators to submit and temporarily mitigate false positive files that have been quarantined from OneDrive, Teams, and SharePoint.

This message is associated with Microsoft 365 Roadmap ID 380186.

When this will happen:

Standard Release: We will begin rolling out mid-February 2024 and expect to complete by mid-March 2024. 

How this will affect your organization:

These screenshots from Quarantine Defender XDR 365 for Office show how to submit false positive files to Microsoft and how to see your submissions in the queue.

Figure 1: Action button to submit false positives files:

View image in new tab

Figure 2: Review submission detail:

View image in new tab

Figure 3: Review submission confirmation:

View image in new tab

Figure 4: Submitted files can be found in the submission queue:

What you need to do to prepare:

No action is needed to prepare for this change. You may want to notify your users about this change and update any relevant documentation as appropriate.

View image in new tab

Message ID: MC711337


No comments yet

Leave a Reply


I've been working with Microsoft Technologies over the last ten years, mainly focused on creating collaboration and productivity solutions that drive the adoption of Microsoft Modern Workplace.

%d bloggers like this: