MC1108843 – Microsoft Defender for Office 365: Ability to Disagree with admin submissions analysis

cloudscout.one Icon

check before: 2025-07-01

Product:

Defender, Defender for Office 365, Defender XDR

Platform:

Online, Web, World tenant

Status:

In development

Change type:

New feature, Admin impact

Links:

488096

Details:

Summary:
Microsoft Defender for Office 365 will allow SOC teams and admins to dispute submission results directly in the portal, improving detection accuracy by providing feedback on false positives and negatives. This feature, available from mid-July 2025, is on by default and requires no configuration. Admins can access it via the Microsoft Defender portal.

Details:
We're adding a new capability to Microsoft Defender that allows SOC teams and admins to dispute submission results directly within the portal.
This enhancement enables organizations to provide feedback on false positives and false negatives without opening support tickets, streamlining the feedback loop and improving detection accuracy over time.
This message is associated with Microsoft 365 Roadmap ID 488096.
[When this will happen:]
General Availability (Worldwide): Rollout will begin in mid-July 2025 and is expected to complete by end-July 2025.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability

Created:
2025-07-04

updated:
2025-07-04

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

summary for non-techies**

Microsoft is adding a feature to Microsoft Defender for Office 365, starting mid-July 2025, allowing SOC teams and admins to dispute security submission results directly in the portal, providing feedback to improve detection accuracy without needing to open a support ticket.

Direct effects for Operations**

Increased False Positives/Negatives
Without proper preparation, the new dispute feature may lead to an increase in false positives and negatives being reported, as users may not fully understand how to effectively use the new functionality, potentially overwhelming the system with disputes.
   - roles: SOC Team, IT Admins
   - references: https://learn.microsoft.com/en-us/defender-office-365/submissions-admin, https://www.microsoft.com/microsoft-365/roadmap?rtc=1%26filters%3D&searchterms=488096

User Experience Degradation
If the dispute process is not well understood or documented, users may experience frustration and confusion, leading to a negative impact on their overall experience with Microsoft Defender for Office 365.
   - roles: End Users, IT Support Staff
   - references: https://learn.microsoft.com/en-us/defender-office-365/submissions-admin, https://www.microsoft.com/microsoft-365/roadmap?rtc=1%26filters%3D&searchterms=488096

Configutation Options**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only

** AI generated content. This information must be reviewed before use.

a free basic plan is required to see more details. Sign up here


A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.



Last updated 3 days ago

Share to MS Teams

Login to your account

Welcome Back, We Missed You!