Respond File Alerts

@@ -65,7 +65,7 @@ You can contain an attack in your organization by stopping the malicious process > > - The device you're taking the action on is running Windows 10, version 1703 or later, Windows 11, and Windows Server 2012 R2+ > - The file does not belong to trusted non-Microsoft publishers or is not signed by Microsoft-> - Microsoft Defender Antivirus must at least be running on Passive mode. For more information, see [Microsoft Defender Antivirus compatibility](/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility).+> - Microsoft Defender Antivirus must at least be running on Passive mode. For more information, see [Microsoft Defender Antivirus compatibility](microsoft-defender-antivirus-compatibility.md).  The **Stop and Quarantine File** action includes stopping running processes, quarantining the files, and deleting persistent data such as registry keys. @@ -217,7 +217,7 @@ Prevent further propagation of an attack in your organization by banning potenti  > [!IMPORTANT] >-> - The **Block or allow** feature is available if your organization uses Microsoft Defender Antivirus and Cloud-delivered protection is enabled. For more information, see [Manage cloud-delivered protection](/windows/security/threat-protection/microsoft-defender-antivirus/deploy-manage-report-microsoft-defender-antivirus).+> - The **Block or allow** feature is available if your organization uses Microsoft Defender Antivirus and Cloud-delivered protection is enabled. For more information, see [Manage cloud-delivered protection](deploy-manage-report-microsoft-defender-antivirus.md). > > - The Anti-malware client version must be 4.18.1901.x or later. > - The **Block or allow** feature is designed to prevent suspected malware (or potentially malicious files) from being downloaded from the web. It supports portable executable (PE) files, including _.exe_ and _.dll_ files. Support for additional file types will be extended over time.@@ -283,7 +283,7 @@ Learn about deep analysis in the following video: > [!NOTE] > Only files from Windows 10, Windows 11, and Windows Server 2012 R2+ can be automatically collected. -You can also submit a sample through the [Microsoft Defender portal](https://www.microsoft.com/security/portal/submission/submit.aspx) if the file wasn't observed on a Windows 10 device (or Windows 11 or Windows Server 2012 R2+), and wait for **Submit for deep analysis** button to become available.+You can also submit a sample through the [Microsoft Security Intelligence submission portal](https://www.microsoft.com/wdsi/filesubmission) if the file wasn't observed on a Windows 10 device (or Windows 11 or Windows Server 2012 R2+), and wait for **Submit for deep analysis** button to become available.  > [!NOTE] > Due to backend processing flows in the Microsoft Defender portal, there could be up to 10 minutes of latency between file submission and availability of the deep analysis feature in Defender for Endpoint.@@ -357,4 +357,3 @@ If you come across a problem when trying to submit a file, try each of the follo - [Take response actions on a device](respond-machine-alerts.md) - [Investigate files](investigate-files.md) - [Manual response actions in Microsoft Defender for Endpoint Plan 1](defender-endpoint-plan-1.md#manual-response-actions)-