Skip to content

Update submissions-result-definitions.md #291

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Jun 13, 2025
Merged

Update submissions-result-definitions.md #291

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
218ca4d
Update submissions-result-definitions.md
MishraSoumyaMS Jun 13, 2025
b508030
Update submissions-result-definitions.md
chrisda Jun 13, 2025
bcf938d
Merge branch 'public' into patch-3
chrisda Jun 13, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 19 additions & 3 deletions defender-office-365/submissions-result-definitions.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ ms.collection:
- tier1
description: Admins and end-users can learn about the results of submitting entities to Microsoft for analysis.
ms.service: defender-office-365
ms.date: 07/26/2024
ms.date: 06/13/2025
appliesto:
- ✅ <a href="https://learn.microsoft.com/defender-office-365/eop-about" target="_blank">Exchange Online Protection</a>
- ✅ <a href="https://learn.microsoft.com/defender-office-365/mdo-about#defender-for-office-365-plan-1-vs-plan-2-cheat-sheet" target="_blank">Microsoft Defender for Office 365 Plan 1 and Plan 2</a>
Expand All @@ -37,12 +37,28 @@ When admins or users submit items to Microsoft for analysis, we do the following
[Learn more how submissions are processed behind-the-scenes to generate the result](https://techcommunity.microsoft.com/blog/microsoftdefenderforoffice365blog/how-your-submissions-to-defender-for-office-365-are-processed-behind-the-scenes/4231551).

> [!NOTE]
> In U.S. Government organizations (Microsoft 365 GCC, GCC High, and DoD), admins can submit items to Microsoft for analysis, but the items are analyzed for email authentication and policy hits only. Payload reputation, detonation, and grader analysis aren't done for compliance reasons (data isn't allowed to leave the organization boundary).
>
> - In U.S. Government organizations (Microsoft 365 GCC, GCC High, and DoD), admins can submit items to Microsoft for analysis, but the items are analyzed for email authentication and policy hits only. Payload reputation, detonation, and grader analysis aren't done for compliance reasons (data isn't allowed to leave the organization boundary).
> - AI-powered Submissions Response capability introduces generative AI explanations for email submissions to Microsoft. These explanations aim to provide enterprise admins with clear, detailed, human-readable explanations for why messages were classified. Currently, this feature is scoped to email submissions only, and AI-generated explanations aren't used for the following types of submissions:
> - Files
> - URLs
> - Microsoft Teams messages
> - User submissions
>
> AI-generated explanations are available for the following verdicts:
>
> - Spam
> - Bulk
> - Threats found
> - No threats found
> - Unknown
>
> If the AI-generated explanation is unavailable, the system falls back to the existing explanation as described in the following table.

The following table describes the results of submissions to Microsoft:

- **Status** indicates whether the previously described checks have been completed.
- **Result** indicates the details that were generated during the analysis using the previously described checks
- **Result** indicates the details that were generated during the analysis using the previously described checks.

|Status|Result|Description|
|---|---|---|
Expand Down