The Monitor action in the Safe attachments policy for Microsoft Exchange Online Protection will be retired from early July 2025 to late August 2025. Organizations using the Monitor action will have it automatically changed to Block. The only remaining actions will be Off, Block, and Dynamic delivery.
Applies to: Exchange Online · Microsoft Defender XDR
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).