# SPF records is set up for all your custom domains

SPF records is set up for all your custom domains. A Maester check for Defender, Email authentication.

Source: https://maester.dev/docs/tests/ORCA.235

<!-- This file is generated by website/scripts/generate-test-docs.mjs. Do not edit manually. -->

<div class="test-byline"><div class="test-byline-avatars"><a class="test-byline-avatar test-byline-avatar--author" href="/contributors/soulemike" title="Michael Soule · Original author"><img src="https://github.com/soulemike.png" alt="Michael Soule" width="28" height="28" loading="lazy" decoding="async" /></a></div><div class="test-byline-meta"><span class="test-byline-text">Contributed by <a href="/contributors/soulemike">Michael Soule</a></span><a class="test-byline-link" href="/contributors">All contributors →</a></div></div>

<p class="test-part">Part of <a href="/docs/tests/orca">ORCA</a> · Defender · Email authentication · <a href="/docs/tests">All checks</a></p>

```powershell title="Run this check"
Invoke-Maester -TestId ORCA.235
```

## Overview

SPF helps validate outbound email sent from your custom domain. Microsoft 365 uses the Sender Policy Framework (SPF) TXT record in DNS to ensure that destination email systems trust messages sent from your custom domain.

#### Remediation action

Set up SPF records to prevent spoofing.

#### Related Links

* [Use SPF to validate outbound email sent from your custom domain in Office 365](https://aka.ms/orca-spf-docs-1)

## Details

<details>
<summary>Every attribute of this check</summary>

| Field | Value |
| --- | --- |
| Test ID | ORCA.235 |
| Severity | Medium |
| Suite | ORCA |
| Product | Defender |
| Related products | Exchange Online |
| Feature | Email authentication |
| Area | Email and collaboration protection |
| Resource type | Domain |
| User impact | Low |
| Implementation cost | Medium |
| MITRE ATT&CK | T1566 Phishing, T1684.002 Email Spoofing |
| Supports controls | nist-800-53-r5:SI-8 |
| PowerShell test | [Test-ORCA235](https://github.com/maester365/maester/blob/main/tests/orca/Test.ORCA.235.ps1) |
| Services | ExchangeOnline |

</details>

## Source

- Test: [`tests/orca/Test.ORCA.235.ps1`](https://github.com/maester365/maester/blob/main/tests/orca/Test.ORCA.235.ps1)
- Documentation: [`tests/orca/Test.ORCA.235.md`](https://github.com/maester365/maester/blob/main/tests/orca/Test.ORCA.235.md)