Blog Post

Microsoft Defender for Office 365 Blog
11 MIN READ

Microsoft Defender for Office 365: Fine-Tuning

RenWoods's avatar
RenWoods
Icon for Microsoft rankMicrosoft
Nov 13, 2025

Real-world Defender for Office 365 tuning that closes real attack paths | by Microsoft MVP Joe Stocker

In incident response, most business email compromise doesn’t start with “sophisticated zero-day malware.” It starts with configuration gaps: forwarding mail outside the tenant, users clicking through...
Updated Nov 19, 2025
Version 4.0
detection
microsoft 365 defender
phishing
prevention
Jonas Back's avatar
Jonas Back
Copper Contributor
Apr 29, 2026

Great guidance! We've been, for all our customers, using custom policies and then using Configuration Analyzer to regularly check if there are any new recommendations. Would you say this gives as good protection as using the Standard / Strict presets as long as you lookup and follow new recommendations or does the preset Standard / Strict actually provide more feature "under the hood" that is not visible when creating custom policies?