Recent DiscussionsMost RecentNewest TopicsMost LikesSolutionsTagged:TagRe: Advanced Hunting - Search for Message Header ItemsCurrently we do not support querying the header details in Advanced Hunting. Your ask has been noted and team will look into it for future enhancements.Re: Advanced Hunting is not workingPlease check the permissions granted to you under Permissions & roles section in left pane. To access advanced hunting, you need one of the permissions mentioned here https://learn.microsoft.com/en-us/microsoft-365/security/defender/custom-roles?view=o365-worldwide#required-roles-and-permissions. If you are still not able to access advanced hunting, please create a support ticket.Re: A potentially malicious URL click was detectedHi John, we log all the URL clicks but the URL click alerts are raised only if the user has clicked on the URLs identified as malicious by Microsoft Defender for Office 365. If you believe any alert is a false alarm, please create a ticket through our customer support channels. Our teams will investigate and get back to you with the details. For more details on these policies, you can refer to this documentation: https://learn.microsoft.com/en-us/microsoft-365/compliance/alert-policies?view=o365-worldwide#threat-management-alert-policies
Recent Blog ArticlesNewest TopicsMost LikesTagged:TagUse community queries to hunt more effectively across email and collaboration threats Community queries enhance your threat-hunting capabilities, streamline investigation processes, and empower your SOC with easy access to shared knowledge. Hunting and responding to QR code-based phishing attacks with Defender for Office 365 Microsoft Defender for Office 365 has introduced several enhancements to its investigation, hunting and response capabilities to help security teams to hunt and respond to QR code Phishing. ...Announcing persistent views and UX enhancements in Threat Explorer Refining the user interface and functionality in threat Explorer to provide a more intuitive, responsive, and seamless experience for users. Enhanced threat detection with URL click alerts by Microsoft Defender for Office 365 Microsoft Defender for Office 365 now features alerting policy enhancements to support the detection, investigation, and remediation of threats via URLs sent over email.
MicrosoftMicrosoftMicrosoftMicrosoft
