Skip to content

MT.1162: Cloud Extended Timeout should be 30-50 seconds.

ID MT.1162
Severity Low
Suite Mito
Product Defender
Related products Intune
Feature Endpoint antivirus
Security area Devices and endpoints
Resource type Policy
User impact of fixing Low
Effort to fix Low
MITRE ATT&CK T1204.002
Reads from Microsoft Graph

Checks that the cloud extended timeout is configured between 30-50 seconds in all assigned Microsoft Defender Antivirus policies.

Insufficient cloud timeout may prevent thorough analysis of suspicious files, allowing potentially malicious content to bypass cloud-based detection.

  1. Open Microsoft Endpoint Manager > Endpoint Security > Antivirus
  2. Edit the relevant Microsoft Defender Antivirus policy
  3. Set Cloud Extended Timeout to 30-50 seconds

Mito check. Author: bdrogja. Open-source licences.

Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).

© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.