Forum Widgets
Latest Discussions
email quarantine and reason "high confidence phish"
Hi I started testing a phishing email campaign from an external vendor KnowBe4. The emails keep going to quarantine reason "high confidence phish" What is the best way to fix this? I tried excluded the URL from Safe Links and added their sender IPs to O365 Tenant allow/block list. Thank you in advanced.89KViews0likes4CommentsAttack Simulation Phishing Tool - IP whitelist
I'm trying to find IP's or domains to whitelist when using the Attack Simulation Phishing Tool. We currently use proofpoint but are planning to move into O365/Exchange online. Would a whitelist for MS's own simulation tool be needed once we move away from Proofpoint?drathbo15Feb 15, 2023Copper Contributor53KViews0likes4CommentsAttack Simulation goes to Junk Folder
I tried a test simulation that only went to me. However, it went to my junk folder. I didn't see anything in the Attack Simulation documentation about whitelisting and assumed that, since it is all going through Microsoft products, it would just work. Are there other steps I need to have the simulations go to users' mailboxes?John TwohigFeb 23, 2023Iron Contributor50KViews0likes4CommentsAttack Simulator emails bypass mail flow rules
Is there any documentation for Attack Simulator emails bypassing mail flow rules? We have a mailflow rule that marks and appends a disclaimer to all external emails coming in. When using the Attack Simulator, emails are bypassed.SolvedFixxser2Feb 16, 2023Brass Contributor48KViews1like3CommentsOffice 365 Defender Phishing Simulation - No Templates
A couple of months ago we upgraded from E3 plan to E5 plan. My understanding is the E5 Plan gives us full access to Office 365 Defender Phishing Simulation & Training. Using a global admin account, if I try to setup a simple policy for a Credential Simulation Attack in my org there is not a single pre-configured template displayed to use for this :-(. Basically no templates anywhere, only training videos. Does anyone know what causes no templates to show in a O365 tenant? When I work through the MS training videos they shows plenty of example templates to choose from without having to resort to designing your own. There is a thread on a Sophos forum about a year ago suggesting Microsoft may have taken all the Templates away due to some copyright issue. Some others have suggested they couldn't see them due to a setup issue on their tenant or it was a problem after they migrated from a 90 trial. Grateful if anyone can shed any light on this. Thanks in advance_JonP_May 21, 2023Copper Contributor47KViews0likes0CommentsMy emails are being quarantined by Office 365 and I need help
I am having really bad issue. We use Google Business for email and Sendgrid SMTP service via our ERP Odoo to send transactional emails. But since last week all of the customers and suppliers that use office 365 are not seeing our emails. Their are being quarantined for suspicion of phishing. WE have been sending the same emails since 2021 so I don't understand how all of a sudden our emails are being blocked. If i send an email with any attachment including my logo in my signature, the email gets blocked but If i send the email with nothing in it it goes through... Let me know if anyone has an idea because I am loosing my mind, i do not know what to do.Solvedalex_aseMay 24, 2023Copper Contributor23KViews0likes10CommentsIs it possible to block emails containing QR CODE?
Is it possible to block emails containing QR CODE?lucanz73Sep 28, 2023Copper Contributor22KViews3likes24CommentsMicrosoft Defender Licensing Requirements
Hello, I have always been under the impression that when licensing Microsoft Defender (Previously ATP) Plan 1 & Plan 2 that you needed a license for each user (You could technically just purchase one license and get all the features but MS advised you need a license per user) Today MS support explained that the defender licenses are tenant wide (i.e. you only need one license to get defender for you entire tenant) can anyone confirm their understanding of this? Here is a link to the license terms which in my mind seems to support my original understanding https://docs.microsoft.com/en-us/office365/servicedescriptions/office-365-advanced-threat-protection-service-description#licensing-terms ThanksSolvedSwiftznFeb 01, 2022Copper Contributor21KViews0likes2CommentsDefender Licensing shared mailboxes
Hi, to add Defender to a shared mailbox it is required the Defender license only, or the Defender + an exchange P1 license? In the past I'm quite sure the P1 was required, today seems not, but I cannot find explicit doc. thanksSolvedtopogigioApr 20, 2022Copper Contributor21KViews0likes2Comments
Resources
Tags
- microsoft 365 defender103 Topics
- phishing44 Topics
- configuration34 Topics
- detection25 Topics
- investigation17 Topics
- prevention13 Topics
- threat intelligence13 Topics
- remediation11 Topics
- hunting10 Topics
- Awareness9 Topics