Microsoft Defender for Office 365: Ability to Disagree with admin submissions analysis

Updated August 14, 2025: We have updated the content. Thank you for your patience. 

We’re adding a new capability to Microsoft Defender that allows SOC teams and admins to dispute submission results directly within the portal.

This enhancement enables organizations to provide feedback on false positives and false negatives without opening support tickets, streamlining the feedback loop and improving detection accuracy over time.

This message is associated with Microsoft 365 Roadmap ID 488096.

When this will happen:

General Availability (Worldwide): Rollout will begin in late August 2025 (previously early August) and is expected to complete by late September 2025 (previously late August).

How this will affect your organization:

If your organization uses Microsoft Defender for Office 365 admin submission features, you’ll now see an option to dispute submission results directly in the Microsoft Defender portal. This allows admins to flag incorrect verdicts (false positives or false negatives) and provide context or evidence, helping Microsoft improve detection accuracy.

This feature is on by default and does not require any configuration.

What you need to do to prepare:

Admins can access the new dispute functionality by navigating to:

Microsoft Defender portal: https://security.microsoft.com

Go to Actions & Submissions > Submissions or directly to https://security.microsoft.com/reportsubmission

To dispute a submission:

1. Select a tab (Emails, URLs, or Email attachments).
2. Click on a completed submission row.
3. Select Dispute submission result.
4. Choose one or more of the following:
• Result
• Reason behind result
• Recommended steps
5. Optionally, provide additional information or upload a screenshot.
6. Click Submit dispute.

A new submission ID will be generated, and a confirmation message will appear in the flyout. You can view dispute details by clicking the submission panel.

Note: Bulk submissions disputes are allowed. However, if a submission contains mixed results, the dispute option will be unavailable.

For more information, refer to:

• Manage submissions - Microsoft Defender for Office 365 | Microsoft Learn