Skip to content

Commit 5dd3fb0

Browse files
authored
Merge pull request #527 from MicrosoftDocs/chrisda
Automatic user notifications GA
2 parents 96959c3 + 0ef29cc commit 5dd3fb0

File tree

2 files changed

+3
-8
lines changed

2 files changed

+3
-8
lines changed

defender-office-365/air-user-automatic-feedback-response.md

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ ms.author: chrisda
66
ms.reviewer: kellycrider
77
manager: deniseb
88
ms.topic: overview
9-
ms.date: 12/21/2023
9+
ms.date: 05/23/2024
1010
ms.service: defender-office-365
1111
appliesto:
1212
- ✅ <a href="https://learn.microsoft.com/defender-office-365/mdo-about#defender-for-office-365-plan-1-vs-plan-2-cheat-sheet" target="_blank">Microsoft Defender for Office 365 Plan 2</a>
@@ -15,9 +15,7 @@ appliesto:
1515

1616
# Automatic user notifications for user reported phishing results in AIR
1717

18-
In Microsoft 365 organizations with Exchange Online mailboxes, admins can configure the backend for messages that users report as malicious or not malicious in Outlook (send to Microsoft, send to a reporting mailbox, or both), and configure the various notification options for user reported messages. For more information, see [User reported settings](submissions-user-reported-messages-custom-mailbox.md).
19-
20-
In Microsoft 365 organizations with Microsoft Defender for Office 365 Plan 2, when a user reports a message as phishing, an investigation is automatically created in [automated investigation and response (AIR)](air-about.md). Admins can configure the user reported message settings to send an email notification to the user who reported the message based on the verdict from AIR. This notification is also known as _automatic feedback response_.
18+
In Microsoft 365 organizations with Microsoft Defender for Office 365 Plan 2, when a user reports a message as phishing, an investigation is automatically created in [automated investigation and response (AIR)](air-about.md). Admins can configure the user reported message settings to send an email notification to the user who reported the message based on the verdict from AIR. This notification is also known as _automatic feedback response_. For more information, see [User reported settings](submissions-user-reported-messages-custom-mailbox.md).
2119

2220
This article explains how to enable and customize automatic feedback response for specific AIR verdicts, how the notification email messages are sent, and what the notifications look like.
2321

defender-office-365/submissions-user-reported-messages-custom-mailbox.md

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ ms.collection:
1616
ms.custom:
1717
description: "Admins can configure where user reported messages go for analysis: to an internal reporting mailbox, to Microsoft, or both. Other settings complete the reporting experience for users when they report good messages, spam, or phishing messages from Outlook."
1818
ms.service: defender-office-365
19-
ms.date: 5/8/2024
19+
ms.date: 05/23/2024
2020
appliesto:
2121
- ✅ <a href="https://learn.microsoft.com/defender-office-365/eop-about" target="_blank">Exchange Online Protection</a>
2222
- ✅ <a href="https://learn.microsoft.com/defender-office-365/mdo-about#defender-for-office-365-plan-1-vs-plan-2-cheat-sheet" target="_blank">Microsoft Defender for Office 365 Plan 1 and Plan 2</a>
@@ -179,9 +179,6 @@ When **Monitor reported messages in Outlook** is selected and you also select **
179179

180180
- **Automatically email users the results of the investigation**: This feature is available only in Defender for Office 365 Plan 2 organizations with [automated investigation and response (AIR)](air-about.md).
181181

182-
> [!NOTE]
183-
> This feature is currently in Private Preview, isn't available in all organizations, and is subject to change.
184-
185182
If a user reports a message as phishing, an investigation in AIR is automatically created. The following options send notification email to the user who reported the message based on the results from AIR (select one or more options):
186183

187184
- **Phishing or malware**: An email notification is sent to the user who reported the message as phishing when AIR identifies the threat as phishing, high confidence phishing, or malware.

0 commit comments

Comments
 (0)