Microsoft Defender for Office 365: Updated submission results in ThreatSubmissionAPI

Administrators and security operators have been seeing enhanced results within submissions across email, Microsoft Teams messages, email attachments, URLs, and user-reported messages in security.microsoft.com since May 2024. These updates aim to eliminate any ambiguity associated with the current submission results. The results will be refined to ensure clarity, consistency, and conciseness, making the submission results more actionable for you.

We are bringing these updates to ThreatSubmissionAPI, so these enhanced result details are available, regardless of where they are reviewed.

For more information, see the submissionResult resource type documentation.

The API will remain in beta, and we'll announce a Global Availability date separately.

When this will happen

Standard Release (Worldwide): We will begin rolling out early August 2024 and expect to complete by late August 2024.

How this will affect your organization

This update will cover all submission results fetched by the API, just like on the Microsoft Defender XDR portal.

What you need to do to prepare

We recommend checking your API setup, especially the result field, to see if any changes are required. You may continue to submit email, URLs, and files to Microsoft, and streamline your security operations.