ORCA.241 - Anti-phishing policy exists and EnableFirstContactSafetyTips is true.
Overview
Attackers pretend to be other people in order to trick users. By enabling first contact safety tips, users are shown a visual representation on the email that this is the first time that they have received an email from this sender. This can trigger users in to being suspicious of an email if it they believe it is coming from someone they know.
Remediation action
Enable first contact safety tips to highlight suspicious messages to users.
Related Links
Test Metadata
| Field | Value |
|---|---|
| Test ID | ORCA.241 |
| Severity | Medium |
| Suite | ORCA |
| Category | EXO |
| PowerShell test | Test-ORCA241 |
| Tags | EXO, ORCA, ORCA.241 |
Source
- Pester test:
tests/orca/Test-ORCA241.Tests.ps1 - PowerShell source:
powershell/public/orca/Test-ORCA241.ps1