A cloud-native solution that protects workloads across hybrid and multi-cloud environments with threat detection and security recommendations
Maybe this link will help. This is more of a Defender for Office topic but it sounds like pass through may be allowed in some situations depending on the policy settings. This may be more of an audit if not blocked.