The purpose of this form is to track internal block requests for MS Defender, review with the SOC automation team, and communicate across campuses and departments as needed. On occasion, it may also be used to review unblock requests if a legitimate need arises.