MT.1171 - Sample Submission should send safe samples automatically

Overview

Verify that sample submission consent is configured to send safe samples automatically.

Restricted sample submission reduces threat intelligence and protection quality.

Remediation action:

1. Open Microsoft Endpoint Manager > Endpoint Security > Antivirus
2. Edit the relevant Microsoft Defender Antivirus policy
3. Set Submit Samples Consent to send safe samples automatically

Related links

• Configure Microsoft Defender Antivirus
• Microsoft Endpoint Manager

Test Metadata

Field	Value
Test ID	MT.1171
Severity	High
Suite	M365Advisor
Category	Defender
PowerShell test	Test-MtMdeSubmitSamplesConsent
Tags	Defender, M365Advisor, MT.1171

Source

• Pester test: tests/M365Advisor/Defender/Test-MtMdeAntivirusPolicy.Tests.ps1
• PowerShell source: powershell/public/m365advisor/defender/Test-MtMdeSubmitSamplesConsent.ps1