---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Playbook for Office 365 - Malicious File Detected

# Playbook for Office 365 - Malicious File Detected {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

This playbook provides systematic remediation steps for investigating malicious files detected in Office 365.

When malicious files are detected in Office 365, you can use the 365 - Malicious File Detected playbook in the Flow Designer for guidance and help optimize the investigation of these malicious files.
* **[Set up the Office Malicous File Detected playbook](https://servicenow-prod.fluidtopics.net/QSpkObUWe6ghVPWmOrZKjQ)**   
  Use the following steps to set up the Office Malicous File Detected playbook.
* **[Use the Office 365 Malicious File Detected playbook](https://servicenow-prod.fluidtopics.net/6RnTsg2_j1O9JGxFL3erLA)**   
  Use this playbook to investigate malicious files detected in Office 365. The following steps give you a walkthrough of the actions, tasks, and subflows that are available in the Office 365 Malicious File Detected playbook.