Hi all,
I'm trying to figure out how to either report a false block to Microsoft, or whitelist a website that was blocked.
Your IT administrator has caused Windows Defender Exploit Guard to block a potentially dangerous network connection.
Detection time: 2019-02-04T19:37:31.935Z
User: S-1-5-21-11****
Destination: http://*websitehere*.com
Process Name: C:\Program Files\Mozilla Firefox\firefox.exe
I have access to the web portal at Windows Defender ATP I have gone in there and whitelisted the IP as this is the ONLY thing I could think of to whitelist the page, but this isn't working. I cannot find and kind of config file or GPO setting either, but that doesn't mean one doesn't exist.
Searching the internet I can find no way to report the incorrect block and if I go into the help section in Security Center I do see a report option, but it won't let me do it from my work email, I have to use an old microsoft account that has no license, so for a SINGLE report, it says it will cost $499.
If it matters, the website does come up clean in virustotal and other web scanners.
Any help would be greatly appreciated!
Thank you!
More...