ORCA.221 - Mailbox intelligence is enabled in anti-phishing policies.
Overview
Mailbox Intelligence checks can provide your users with intelligence on suspicious incoming emails that appear to be from users that they normally communicate with based on their graph.
Remediation action
Enable mailbox intelligence in anti-phishing policies.
Related Links
- Microsoft 365 Defender Portal - Anti-phishing
- Recommended settings for EOP and Microsoft Defender for Office 365
Test Metadata
| Field | Value |
|---|---|
| Test ID | ORCA.221 |
| Severity | Medium |
| Suite | ORCA |
| Category | EXO |
| PowerShell test | Test-ORCA221 |
| Tags | EXO, ORCA, ORCA.221 |
Source
- Pester test:
tests/orca/Test-ORCA221.Tests.ps1 - PowerShell source:
powershell/public/orca/Test-ORCA221.ps1