Blocked Suspicious URL and Browsing History

Erwin Corvera 25

Good morning, MS Team!

I've been handling incidents and alerts through MS Defender about employees trying to access flagged or suspicious URL. The access was detected and blocked by network protection.

Whenever I reach out to the users to validate the activity, the most common answer I get from users is they're unsure or doesn't recall the attempt since the suspicious URL doesn't show in their browsing history. I've read the entire Respond to Web Threats topic but didn't find anything that says blocked URLs by network protection won't get logged in the user's browsing history.

So my questions are:

Are URLs blocked by network protection not logged in the user's browsing history?
Is there another way for me to help the users validate through their respective endpoints that the said URLs were indeed attempted?

Givary-MSFT 30,596 Reputation points Microsoft Employee

2024-07-12T08:33:20.81+00:00

@Erwin Corvera Thank you for reaching out to us, just wanted to check if you have reviewed this article - https://learn.microsoft.com/en-us/defender-endpoint/investigate-domain where it has the steps on investigating the domain and suspicious URL's.

However let me research on the above mentioned questions and revert back.

Share via

Blocked Suspicious URL and Browsing History