Forum Discussion
Microsoft Defender 365 - Quarantine
Hi to all, I have problem with High Confidence Phish on my tenant. Many inbound mails are blocked and sent to quarantine. I release around 100 emails with false positive case in the last few days...
the incoming emails marked as Phish are from one domain or multiple domains ?
from multiple domains. almost every mail is from different domain
- what is the Phishing threshold in your Anti-Phishing Policy in MDO ? any changes have been to this policy during that week ?
- Nothing has been changed. Is about preset security polices, standard default protection is enabled. It is the only policy that has been applied and it is a default template
