As with other services, we offer you a summary of the changes and features that Microsoft has introduced during the month regarding its Microsoft Defender for Office (formerly Office 365 Advanced Threat Protection (ATP)).
Configuration Analyzer Update
with:
- Safe links Policy: Create Custom safe links policy.
- Outlook: Configure External tag in Outlook.
- Anti Phishing Policy: Enable First contact safety tips.
- DKIM: Configure DKIM and SPF for your domains.
- Built-in Protection Policy: Remove Built-in protection exclusions.
- Malicious Printed QR Codes
- Malicious Digital QR Codes
New recommendations:
By clicking on a recommendation, you will now open a pop-up window containing brief details on the reasons for the recommendation as well as targeted links to documents to consult for further information.
A new Export button should appear when you select one or more recommendations. By clicking the Export button, you download the selected recommendations in the form of a CSV file that can be shared with your external partners who do not have access to your environment.
As a reminder, this tool helps you identify and remediate security policies that are less secure than the recommended settings. It allows you to compare your current policies against standard or strict predefined policies, apply recommendations to improve your security posture, and review the change history of your policies.
Administrators can identify whether they are submitting an item to Microsoft for a second opinion or whether they are submitting the message because it is malicious and was missed by Microsoft. With this change, Microsoft's analysis of messages submitted by administrators (email and Microsoft Teams), URLs and email attachments is further streamlined and results in more accurate analysis.
Microsoft launches two training modules on QR Code phishingin Attack Simulation Training via a partnership with Fortra Terranova Security:
Microsoft adds several languages for reach 37 supported languages for the following modules: Teams Phishing, Understanding App Consent Request, Double Barrel Phishing Attack, and Stegosploit