check before: 2025-07-01
Product:
Defender, Defender for Office 365
Platform:
Web, World tenant
Status:
In development
Change type:
Links:
Details:
We are enabling the ability for SOC and admins to disagree with submission responses within the Submission experience and provide feedback to Microsoft on false negatives and false positives.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
General Availability
Created:
2025-05-02
updated:
2025-05-02
Docu to Check
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
summary for non-techies**
Microsoft Defender for Office 365 is introducing a feature that allows Security Operations Centers and administrators to provide feedback on Microsoft's email threat analysis, enabling them to report false positives or negatives directly within the platform to improve threat detection accuracy.
Direct effects for Operations**
User Experience Degradation
If the ability to disagree with Microsoft submissions is enabled without proper training, users may misuse the feature, leading to confusion and frustration when legitimate submissions are incorrectly flagged or not addressed.
- roles: SOC Analyst, IT Administrator
- references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-defender-for-office-365-new-submission-experience/ba-p/3651230
Increased Incident Response Time
Without preparation, the introduction of the feedback mechanism may overwhelm the SOC team with false reports, leading to delays in addressing genuine security incidents and impacting overall response times.
- roles: SOC Analyst, Incident Response Team
- references: https://www.microsoft.com/en-us/security/blog/2021/03/02/announcing-microsoft-defender-for-office-365/
Configutation Options**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
Last updated 3 weeks ago
