Event banner
Securing corporate credentials with Enhanced Phishing Protection
Event Ended
Tuesday, Oct 25, 2022, 10:30 AM PDTEvent details
Credential phishing has been increasing at alarming rates in recent years and is the number one security threat facing enterprises, as attackers with corporate credentials can wreak havoc on an organ...
Heather_Poulsen
Updated Dec 27, 2024
El_Duderino1985
Oct 24, 2022Copper Contributor
I have already asked this question here (https://techcommunity.microsoft.com/t5/windows-it-pro-blog/protect-passwords-with-enhanced-phishing-protection/ba-p/3631881), but since I have not received an answer yet, I would like to try again here:
I have just tested the feature, and everything works for me except that the alerts also end up in Microsoft Defender for Endpoint Portal. The test devices are all onboarded in Microsoft Defender for Endpoint Portal and other alerts are also displayed. Only the Enhanced phishing protection alerts are not displayed. Licensing-wise, a M365 E3 with E5 Security Addon is available. What could be the reason for this?
Sinclaire_Hamilton
Microsoft
Oct 25, 2022Hi Fabrizio,
1) Are you on Windows 11 22H2?
2) What other alerts can you see in the MDE Security Portal?
3) Have you been able to generate an Enhanced Phishing Protection blocking dialog on any test devices that are onboarded to MDE?
- El_Duderino1985Oct 25, 2022Copper ContributorHi Sinclaire. Thanks for your reply! 1) Yes, Windows 11 22H2 2) I have tested it with a test alert ([Test Alert] Suspicious Powershell commandline) https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/run-detection-test?view=o365-worldwide 3) Yes, all blocking notifications are working! (Notify Malicious, Notify Password Reuse, Notify Unsafe App)
- Sinclaire_HamiltonOct 25, 2022
Microsoft
Ok, in that case there may be a licensing issue - I will check with the Defender team to understand why Enhanced Phishing Protection alerts do not show up with E5 security Add-on license on E3.- El_Duderino1985Oct 25, 2022Copper ContributorOk, thanks! I will additionally try a M365E5 license and test it again.