ORCA.115 - Mailbox intelligence based impersonation protection is enabled in anti-phishing policies.
Overview
Mailbox Intelligence Protection enhances impersonation protection for users based on each user's individual sender graph.
Remediation action
Enable Mailbox intelligence based impersonation protection in anti-phishing policies.
Related Links
- Microsoft 365 Defender Portal - Anti-phishing
- Recommended settings for EOP and Microsoft Defender for Office 365 security
- Set up Microsoft Defender for Office 365 anti-phishing and anti-phishing policies
Test Metadata
| Field | Value |
|---|---|
| Test ID | ORCA.115 |
| Severity | Medium |
| Suite | ORCA |
| Category | EXO |
| PowerShell test | Test-ORCA115 |
| Tags | EXO, ORCA, ORCA.115 |
Source
- Pester test:
tests/orca/Test-ORCA115.Tests.ps1 - PowerShell source:
powershell/public/orca/Test-ORCA115.ps1