' Malware not zapped because ZAP is disabled ' severity inconsistency

[Marnik]

The alert policy ' Malware not zapped because ZAP is disabled ' is set to medium severity in the default alert policies for MDO, while it's documented as informational severity in official MSFT docs: https://learn.microsoft.com/en-us/purview/alert-policies?view=o365-worldwide#threat-management-alert...

Is this a documentation inconsistency, or am I overlooking something?

[#2 · Accepted solution]

Perhaps they changed the severity and someone forgot to update the documentation? Or it's just inaccurate, won't be the first time 🙂
You can use the Feedback button on the top of the page to report this.