Forum Widgets
Latest Discussions
Phishing attack simulator incorrectly emails people the message, "Because you were recently phished"
Hi folks, * I am evaluating Microsoft Phishing Attack Simulator with a 4 user pilot * None of the 4 users were phished in any of the 3 simulations that I actioned * At the end of each simulation, users are correctly being emailed a message with a link to phishing traning * However, the email with the link to the phishing training contains this wording: "Because you were recently phished, we require you to take training(s) to recognize phishing attacks in future." * The wording I quote is troublesome since it: a) Is inaccurate; none of the users were phished b) Presents me (and potentially my colleagues in IT Support), negatively, since it makes us look like we aren't in control of the simulation technology (ie it looks like we don't understand the reality of how each user responded in the simulations) c) Risks alienating us from our users My questions thus are: 1) Is anyone else impacted with this issue? 2) Is there a way for the wording I refer to, to be constructively edited? Any help is always appreciated. Regards, Steve
Defender bulk unsanction
I want to unsanctioned all Generative AI apps in cloud catalogue with a risk score 7 or below. But this is 970 apps and I don't feel like doing this one page of 20 at a time I'll be there all day. Can someone suggest a powershell script to set anything in that category risk score 0-7 as unsanctioned?
All the mail from one mail adress arrive in quarantine with an SCL = 5
All the emails sent to us by our customer (email address removed for privacy reasons) arrive in our quarantine with an SCL score of 5. However, the email address passes the DMARC tests perfectly (test carried out with https://www.dmarctester.com/). The domain is not blacklisted, and emails from his colleagues email address removed for privacy reasons and email address removed for privacy reasons arrive with no problem. The content of the email shouldn't be the problem either, as an empty email is also quarantined. What additional diagnostic work can I do to understand why the SCL for each of his emails scores 5?
Report Message Add-in going away?
Logging on to the Threat Policy page today and was presented with the below message. "The User reported message settings page will start moving for some tenants in late-March 2022 from the Policies & rules section to the Settings section of the Microsoft 365 Defender portal. Also to simplify reporting messages in your organization, we'll be integrating the report feature directly into Outlook's default Junk and Phishing buttons starting. You will no longer need the Report Message add-in. All tenants will see the new change by end of April 2022. " Does this mean the Report Message-Add In is going away? How will users report Phishing? Will the Report Message-Add In quit working? I can't find any additional information on this topic so I would appreciate any info. Thanks.
