Best Practices for actions on detected malware threats ?

roger_jr You can quarantine the files and also add indicators to block it. https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/respond-file-alerts?view=o365-worldwide