False Virus positives - How to integrate other AV?

[edh]

Hi,

In tenants with thousand of items , we get tons of "posible virus detected" after check. Some "keygens" were obiusly a trojan other just Excel Macros.

Any what to integrate in VBO other AV?

Regards

[Mike Resseler]

Hi @edh
Those mentions are coming from Microsoft itself, and effectively mean that MSFT has blocked us from downloading that file. This requires action from the tenant.

VBO itself cannot be integrated with any AV at this point in time.

[aeph]

Hello, we also have these warnings with our tenants. Even after we whitelisted these recognized files in the Windows Defender portal, the warning does not disappear.
How to deal with this files? We want to give our customers advice how they should handle the files so we can include them in our backup.

[edh]

Hi @edh
Those mentions are coming from Microsoft itself, and effectively mean that MSFT has blocked us from downloading that file. This requires action from the tenant.

VBO itself cannot be integrated with any AV at this point in time.

Microsoft provides the scanning of the file once get from "rest" storage for download??

[Mike Resseler]

@edh

Yes, if you have files like that, it means the MSFT scanning itself has locked the file, and does not allow us to download it. More information (from Microsoft) is here: https://support.microsoft.com/en-us/off ... 1ac0c37ad2