Forum Discussion

Brass Contributor

Mar 30, 2023

Defender 365 - SmartAlerts: User exfiltrating sensitive information via Removable Media

Hi, In the past few days we have started seeing incidents/alerts for "SmartAlerts: User exfiltrating sensitive information via Removable Media". We do not believe we have enabled any features or ...

alerts

microsoft defender for endpoint

ab1540

Copper Contributor

Jul 03, 2023

Has anyone found a way to tune these "smart" alerts or disable them?

i-_-i

Copper Contributor

Jul 03, 2023

No, I raised a ticket with MS, and they wasted 2 months assigning it to the wrong teams, that all misquoted old or out of date guides, they didn't understand the product.

I eventually gave up and created an automation rule to close them.