Forum Discussion

IT-Guy370's avatar
IT-Guy370
Copper Contributor
Feb 08, 2023

Safe Links alert for Links of our Sharepoint Online site

Hi,

 

We share Documents internally from our SharePoint Online instance,

when a user opens up the link, the link is connected to a Word/Excel document or it takes them to the site to view the files but,

 

Safe Links flags it as

A potentially malicious URL click was detected. 

Severity: ● High

Activity: Malicious URL click
View investigation details: urn:UrlVerdictChangeInvestig

 

the investigation does not show much info as to why it flagged a normal document, and the documents are not malicious as i have checked them myself.

Does anyone have an idea what is happening?

 

alerts
microsoft defender for endpoint
microsoft defender for office 365

1 Reply

  • Antons Bukels's avatar
    Antons Bukels
    Brass Contributor
    Feb 08, 2023

    Hi IT-Guy370,

     

    I would suggest using the Admin submissions in the M365 Defender portal to submit this Url as a False Positive and add it to the allowed list for some time while Microsoft analysis the submission. 

    https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/submissions-admin?view=o365-worldwide 

     

Resources