The message details updates to Microsoft Defender for Office 365's ThreatSubmissionAPI, enhancing submission results for better clarity and actionability. These updates apply to email, Teams messages, attachments, URLs, and user reports. The API remains in beta, with a global release date to be announced. Rollout starts early August 2024. Users should check their API setup for necessary changes.
Administrators and security operators have been seeing enhanced results within submissions across email, Microsoft Teams messages, email attachments, URLs, and user-reported messages in security.microsoft.com since May 2024. These updates aim to eliminate any ambiguity associated with the current submission results. The results will be refined to ensure clarity, consistency, and conciseness, making the submission results more actionable for you.
We are bringing these updates to ThreatSubmissionAPI, so these enhanced result details are available, regardless of where they are reviewed.
For more information, see the submissionResult resource type documentation.
The API will remain in beta, and we'll announce a Global Availability date separately.
When this will happen:
Standard Release (Worldwide): We will begin rolling out early August 2024 and expect to complete by late August 2024.
How this will affect your organization:
This update will cover all submission results fetched by the API, just like on the Microsoft Defender XDR portal.
What you need to do to prepare:
We recommend checking your API setup, especially the result field, to see if any changes are required. You may continue to submit email, URLs, and files to Microsoft, and streamline your security operations.