Microsoft Defender XDR for Office 365: Streamlined false positive submissions for quarantined files
From Microsoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.Rollout
- Roadmap
- 380186
Rollout dates are often only in the text. When Microsoft moves them, the change shows under "What changed".
Schedule dates changed in the text
Date phrases in schedule sentences differ between the versions we saw- Seen 4 Apr 2024
late March 2024, late April 2024
Read from date phrases in Microsoft's text, not from notice metadata. A changed phrase can be a moved rollout, a new milestone or just rewording; "What changed" below shows which.
What the notice says
Microsoft’s text, safely structuredUpdated April 4, 2024: We have made the decision not to proceed with this rollout at this time. You can safely disregard this message.
In Microsoft Defender XDR for Office 365, we are providing an easy and robust way for admins and security operators to submit and temporarily mitigate false positive files that have been quarantined from OneDrive, Teams, and SharePoint.
This message is associated with Microsoft 365 Roadmap ID 380186.
When this will happen
We have made the decision not to proceed with this rollout at this time.
How this will affect your organization
These screenshots from Quarantine Defender XDR 365 for Office show how to submit false positive files to Microsoft and how to see your submissions in the queue.
Figure 1: Action button to submit false positives files:
Figure 2: Review submission detail:
Figure 3: Review submission confirmation:
Figure 4: Submitted files can be found in the submission queue:
What you need to do to prepare
No action is needed to prepare for this change. You may want to notify your users about this change and update any relevant documentation as appropriate.
What changed
Between archive captures, newest firstUpdated
March 1,April 4, 2024: We haveupdatedmade the decision not to proceed with this rollouttimeline below. Thank you for your patience.at this time. You can safely disregard this message. In Microsoft Defender XDR for Office 365, we are providing an easy … and SharePoint. This message is associated with Microsoft 365 Roadmap ID 380186.[WhenWhen this willhappen:] Worldwide:happen: Wewill begin rolling out late March 2024 (previously mid-February) and expect to complete by late April 2024 (previously mid-March). [Howhave made the decision not to proceed with this rollout at this time. How this will affect yourorganization:]organization: These screenshots from Quarantine Defender XDR 365 for Office show how to … confirmation: Figure 4: Submitted files can be found in the submission queue:[WhatWhat you need to do toprepare:]prepare: No action is needed to prepare for this change. You may want …… and SharePoint. This message is associated with Microsoft 365 Roadmap ID 380186.
When[When this willhappen:happen:] Worldwide: We will begin rolling out late March 2024 (previously mid-February) and expect to complete by late April 2024 (previously mid-March).How[How this will affect yourorganization:organization:] These screenshots from Quarantine Defender XDR 365 for Office show how to … confirmation: Figure 4: Submitted files can be found in the submission queue:What[What you need to do toprepare:prepare:] No action is needed to prepare for this change. You may want …- · first version seen
Learn more
Links from the notice and their documentation checksRelated public changes
No related announcements were found in the saved public history. Check the source for newer announcements.
Not confirmed here
What this page cannot tell you- Whether your tenant is affected: this is Microsoft's notice, not a check of your settings.