Outlook is configured to display external tags for external emails
ORCA.240MediumDefenderTenant settings
Part of ORCA · Defender · Tenant settings · All checks
Invoke-Maester -TestId ORCA.240Overview
Section titled “Overview”External tags show users email that is coming from external. EOP & MDO works with native client side integration to clearly highlight external emails. This allows you to train users to identify these emails so that they can be more suspicious about the email contents.
Remediation action
Section titled “Remediation action”Configure external tags to highlight emails which are sent from external.
Related Links
Section titled “Related Links”Details
Section titled “Details”Every attribute of this check
| Field | Value |
|---|---|
| Test ID | ORCA.240 |
| Severity | Medium |
| Suite | ORCA |
| Product | Defender |
| Related products | Exchange Online |
| Feature | Tenant settings |
| Area | Email and collaboration protection |
| Resource type | Tenant |
| User impact | Low |
| Implementation cost | Low |
| MITRE ATT&CK | T1566 Phishing |
| Supports controls | nist-800-53-r5:SI-8 |
| PowerShell test | Test-ORCA240 |
| Services | ExchangeOnline |
Source
Section titled “Source”- Test:
tests/orca/Test.ORCA.240.ps1 - Documentation:
tests/orca/Test.ORCA.240.md