SPF records is set up for all your custom domains
ORCA.235MediumDefenderEmail authentication
Part of ORCA · Defender · Email authentication · All checks
Invoke-Maester -TestId ORCA.235Overview
Section titled “Overview”SPF helps validate outbound email sent from your custom domain. Microsoft 365 uses the Sender Policy Framework (SPF) TXT record in DNS to ensure that destination email systems trust messages sent from your custom domain.
Remediation action
Section titled “Remediation action”Set up SPF records to prevent spoofing.
Related Links
Section titled “Related Links”Details
Section titled “Details”Every attribute of this check
| Field | Value |
|---|---|
| Test ID | ORCA.235 |
| Severity | Medium |
| Suite | ORCA |
| Product | Defender |
| Related products | Exchange Online |
| Feature | Email authentication |
| Area | Email and collaboration protection |
| Resource type | Domain |
| User impact | Low |
| Implementation cost | Medium |
| MITRE ATT&CK | T1566 Phishing, T1684.002 Email Spoofing |
| Supports controls | nist-800-53-r5:SI-8 |
| PowerShell test | Test-ORCA235 |
| Services | ExchangeOnline |
Source
Section titled “Source”- Test:
tests/orca/Test.ORCA.235.ps1 - Documentation:
tests/orca/Test.ORCA.235.md