Microsoft Defender
      Back to home
      1. Sittadel Knowledge Base
      2. Management Guides
      3. Microsoft Defender

      Defender for Email Submit and Allow Action

      This guide will show an administrator how to submit a desired quarantined email to Microsoft for analysis and how create a temporary allowance for the sender or sender domain until the system can update the scanning criteria.

      Role Requirements

      Procedure Scope: Administrators

      Required Group Membership: Admin.Security

      Handbook Reference

      Package: TBD

      Domain: TBD

      Modifies: TBD

      Defender for Email Submit and Allow Action

      1. Open a desired quarantined email, locate, and select the three dots followed by selecting the Submit for Review action.
      2. The Submit to Microsoft for analysis flyout will open; Two out of the three fields will be pre-generated with email related information, locate and select the I’ve Confirmed its Clean option, followed by Next.
      3. On the following screen, select Allow this Message, along with setting the entry to expire after the desired amount of time and adding an optional note. Click Submit to finalize.

      Need Assistance?

      Reach out to your Customer Success Manager to discuss how a Sittadel cybersecurity analyst can assist in managing these tasks for you. New to our services? Inquire about arranging a consultation to explore optimizing your Azure environment for painless management.