Skip to content

Commit 4150ca8

Browse files
committed
Added link to submission techcommunity
Added link for customers to understand what goes behind the submission and how is a result generated
1 parent 452f005 commit 4150ca8

File tree

4 files changed

+8
-0
lines changed

4 files changed

+8
-0
lines changed

defender-office-365/submissions-admin-review-user-reported-messages.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -42,6 +42,8 @@ Admins can mark messages and notify users of review results only if the user [re
4242
- **Payload reputation/detonation**: Up-to-date examination of any URLs and attachments in the message.
4343
- **Grader analysis**: Review done by human graders to confirm whether or not messages are malicious.
4444

45+
[Learn more how submissions are processed behind-the-scenes to generate the result](https://techcommunity.microsoft.com/blog/microsoftdefenderforoffice365blog/how-your-submissions-to-defender-for-office-365-are-processed-behind-the-scenes/4231551).
46+
4547
So, submitting or resubmitting messages to Microsoft is useful to admins only for messages that have never been submitted to Microsoft, or when you disagree with the original verdict.
4648

4749
- You need to be assigned permissions before you can do the procedures in this article. You have the following options:

defender-office-365/submissions-admin.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -823,6 +823,8 @@ The analysis results of the reported item are shown in the details flyout that o
823823
- Current detonation results to see if the URLs or files in the message were malicious or not.
824824
- Feedback from graders.
825825

826+
[Learn more how submissions are processed behind-the-scenes to generate the result](https://techcommunity.microsoft.com/blog/microsoftdefenderforoffice365blog/how-your-submissions-to-defender-for-office-365-are-processed-behind-the-scenes/4231551).
827+
826828
If an override or policy configuration was found, the result should be available in several minutes. If there wasn't a problem in email authentication or delivery wasn't affected by an override or policy, the detonation and feedback from graders could take up to a day.
827829

828830
### Actions for admin submissions in Defender for Office 365

defender-office-365/submissions-result-definitions.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -34,6 +34,8 @@ When admins or users submit items to Microsoft for analysis, we do the following
3434
- **Payload reputation/detonation**: Up-to-date examination of any URLs and attachments in the message.
3535
- **Grader analysis**: Review done by human graders to confirm whether messages are malicious.
3636

37+
[Learn more how submissions are processed behind-the-scenes to generate the result](https://techcommunity.microsoft.com/blog/microsoftdefenderforoffice365blog/how-your-submissions-to-defender-for-office-365-are-processed-behind-the-scenes/4231551).
38+
3739
> [!NOTE]
3840
> In U.S. Government organizations (Microsoft 365 GCC, GCC High, and DoD), admins can submit items to Microsoft for analysis, but the items are analyzed for email authentication and policy hits only. Payload reputation, detonation, and grader analysis aren't done for compliance reasons (data isn't allowed to leave the organization boundary).
3941

defender-office-365/submissions-users-report-message-add-in-configure.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -109,6 +109,8 @@ After the add-in is installed and enabled, users see the following icons based o
109109
- **Payload reputation/detonation**: Up-to-date examination of any URLs and attachments in the message.
110110
- **Grader analysis**: Review done by human graders to confirm whether or not messages are malicious.
111111

112+
[Learn more how submissions are processed behind-the-scenes to generate the result](https://techcommunity.microsoft.com/blog/microsoftdefenderforoffice365blog/how-your-submissions-to-defender-for-office-365-are-processed-behind-the-scenes/4231551).
113+
112114
So, submitting or resubmitting messages to Microsoft is useful to admins only for messages that have never been submitted to Microsoft, or when you disagree with the original verdict.
113115

114116
- Organizations that use URL filtering or a third-party security solution (for example, a proxy and/or firewall) must be able to reach the following URLs using the HTTPS protocol:

0 commit comments

Comments
 (0)