Microsoft Defender may quarantine internal emails with blocked SHA256 file hashes, overriding allow lists. To avoid communication issues, regularly review and update Defender’s file hash policies in the Tenant Allow/Block List.