- Microsoft Defender for Office 365
Help secure your email and Microsoft Teams with advanced protection against phishing, business email compromise, ransomware, and other threats.
- Threat intelligence
- Microsoft Defender
- Threat actors
New TTPs observed in Mint Sandstorm campaign targeting high-profile individuals at universities and research orgs
Since November 2023, Microsoft has observed a distinct subset of Mint Sandstorm (PHOSPHORUS) targeting high-profile individuals working on Middle Eastern affairs at universities and research organizations in Belgium, France, Gaza, Israel, the United Kingdom, and the United States.
- Social engineering / phishing
Financially motivated threat actors misusing App Installer
Since mid-November 2023, Microsoft Threat Intelligence has observed threat actors, including financially motivated actors like Storm-0569, Storm-1113, Sangria Tempest, and Storm-1674, utilizing the ms-appinstaller URI scheme (App Installer) to distribute malware.
Threat actors misuse OAuth applications to automate financially driven attacks
Microsoft Threat Intelligence presents cases of threat actors misusing OAuth applications as automation tools in financially motivated attacks.
Star Blizzard increases sophistication and evasion in ongoing attacks
Microsoft Threat Intelligence continues to track and disrupt malicious activity attributed to a Russian state-sponsored actor we track as Star Blizzard, who has improved their detection evasion capabilities since 2022 while remaining focused on email credential theft against targets.
- Analyst reports
Microsoft Defender for Office 365 gets highest rating in SE Labs Enterprise Email Security Services test for Q1 2023
In Q1 2023 Q1, Microsoft was once again part of an evaluation of email security platforms conducted by SE Labs. We are thrilled to announce that Microsoft Defender for Office 365 has once again received an AAA Protection Award, the highest possible that a vendor can achieve in this test.
Tailored AI insights from Microsoft Security Copilot
Empower your defenders to detect hidden patterns, harden defenses, and respond to incidents faster with generative AI.
Forrester names Microsoft a Leader in the 2023 Enterprise Email Security Wave
Microsoft Defender for Office 365 is recognized as a Leader in Forrester’s 2023 Enterprise Email Security Wave Report.
- Business email compromise
Detecting and mitigating a multi-stage AiTM phishing and BEC campaign
Microsoft Defender Experts observed a multi-stage adversary-in-the-middle (AiTM) and business email compromise (BEC) attack targeting banking and financial services organizations over two days. This attack originated from a compromised trusted vendor, involved AiTM and BEC attacks across multiple supplier/partner organizations for financial fraud, and did not use a reverse proxy like typical AiTM attacks.
- Security management
Microsoft Secure: Explore innovations transforming the future of security
Microsoft Secure kicks off today with on-demand content available to those who register. We’ll share major innovations in AI, identity, and data protection to create a safer world for all.
- Email security
Microsoft Defender for Office 365 named Best Email Security Service of 2023 by SE Labs
Microsoft Defender for Office 365 receives Best Email Security Service of 2023 award by SE Labs.
Modernize your Security Operations Center with Microsoft Sentinel
Microsoft Sentinel is a cloud-native SIEM solution powered by AI and automation that delivers intelligent security analytics across your entire enterprise.
- Best practices
- Endpoint security
Secure your business like you secure your home: 5 steps to protect against cybercrime
Learn five simple actions small and medium-sized businesses can take to protect against evolving cyberattacks, as well as where to access tools and resources for securing your company.
Independently Curated Microsoft 365 Assets
Microsoft security.
About Microsoft Security
Protect your data, apps, and infrastructure against rapidly evolving cyberthreats with cloud security services from Microsoft Security . Source: https://www.microsoft.com/en-us/security
Tip New to Microsoft 365 Defender? Head over to the Microsoft 365 Defender interactive guide for a hands-on tour. Visit the new Microsoft Adoption Demos page to view a wide range of Microsoft 365 demos.
Microsoft Security training & resources
- Microsoft Security home
- Microsoft 365 Defender documentation
- Microsoft 365 security documentation
- Microsoft Security Blog
- Microsoft Security Response Center
- Microsoft Security Technical Content Library
- Security & Compliance adoption hub
- Security & Compliance center roadmap
- Security Training & Certification Guide
- YouTube (Microsoft Mechanics playlist)
Microsoft Security learning paths (Microsoft Learn)
- Defend against threats with Microsoft 365
- Describe the basic concepts of cybersecurity
- Manage information protection and governance
- Browse all…
Latest news from the Microsoft Security blog
- The foundation for responsible analytics with Microsoft Purview March 26, 2024
- Frost & Sullivan names Microsoft a Leader in the Frost Radar™: Managed Detection and Response, 2024 March 25, 2024
- How Microsoft Incident Response and Microsoft Defender for Identity work together to detect and respond to cyberthreats March 21, 2024
- Microsoft Threat Intelligence unveils targets and innovative tactics amidst tax season March 20, 2024
- Microsoft Sentinel delivered 234% ROI, according to new Forrester study March 19, 2024
- Microsoft Security blog | Home
Noteworthy in Microsoft Security
- Introducing Microsoft Security Copilot
- Microsoft Defender for Office 365 step-by-step guides
- The Chief Information Security Officer (CISO) Workshop Training
- Microsoft Security Experts – Extend your ability to defend and manage with a new line of managed services
- Top 10 ways to secure Microsoft 365 for business plans
- America faces a cybersecurity skills crisis: Microsoft launches national campaign to help community colleges expand the cybersecurity workforce
- Welcome to Microsoft 365 Defender! – Microsoft Tech Community
- Microsoft Defender for Endpoint in Microsoft 365 Defender | Microsoft Docs
- A simple approach to data protection (a Microsoft Learn Official Collection)
- For IT professionals: Privacy and security in Microsoft Teams
- How to set up ATP Safe Links in Microsoft 365 for business (YouTube video)
- Microsoft Cybersecurity Reference Architectures
- Microsoft identity acronyms—what do they mean and how do they relate to each other?
- Microsoft Security and Compliance Adoption Guide
- Microsoft Security and Compliance Tech Community
- Microsoft Security Best Practices
- Multi-Factor Authentication (MFA)
- Protecting your data and maintaining compliance in a remote work environment
- Remote Security Solutions
- Security: A Guide to Building Resilience (pdf)
- Secure remote work (best practices and guidance for security professionals)
- Secure Remote Work Practice Development playbook
- Securing your remote workers (e-book)
- Set up multifactor authentication
- Top 4 tips to protect your remote workforce with data compliance in OneDrive
- Top 12 tasks for security teams to support working from home
- Unmanaged device protection capabilities are now generally available
- What is two-factor authentication?
- What’s the difference between Azure Security Center, Azure Defender and Azure Sentinel?
- Work from home more securely
- Work remotely, stay secure—guidance for CISOs
Share Your Feedback Dear Site Visitor, Maintaining this site is a one-person endeavor aimed at providing quick access to valuable Microsoft 365 resources. To ensure its usefulness and relevance, your contribution matters. If you encounter broken links or discover new/updated Microsoft resources, please use the feedback form to notify me. Kindly note, this site is curated, maintained, and paid for independently and is not affiliated with Microsoft. You can learn more about the 365 Training Portal on the About page . Your input greatly aids in keeping this site valuable and current for everyone. Thank you for being a part of this initiative! Graham Owner/curator
Information about SharePoint, Microsoft 365, Azure, Mobility and Productivity from the Computer Information Agency
An introduction to Microsoft Defender for Business presentation
I recently presented on Microsoft Defender for Business along with the other options in the Microsoft Defender for Endpoint. The slides from that presentation can be found here:
https://www.slideshare.net/directorcia/an-introduction-to-defender-for-business
Share this:
Published by directorcia
View all posts by directorcia
Leave a comment Cancel reply
- Already have a WordPress.com account? Log in now.
- Subscribe Subscribed
- Copy shortlink
- Report this content
- View post in Reader
- Manage subscriptions
- Collapse this bar
This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Microsoft Defender for Office 365 service description
- 17 contributors
Microsoft Defender for Office 365 is a cloud-based email filtering service that helps protect your organization against advanced threats to email and collaboration tools, like phishing, business email compromise, and malware attacks. Defender for Office 365 also provides investigation, hunting, and remediation capabilities to help security teams efficiently identify, prioritize, investigate, and respond to threats.
The following are the primary ways you can use Defender for Office 365 for message protection:
In a Defender for Office 365 filtering-only scenario, Defender for Office 365 provides cloud-based email protection for your on-premises Exchange Server environment or any other on-premises SMTP email solution.
Defender for Office 365 can be enabled to protect Exchange Online cloud-hosted mailboxes. To learn more about Exchange Online, see the Exchange Online service description .
In a hybrid deployment, Defender for Office 365 can be configured to protect your messaging environment and control mail routing when you have a mix of on-premises and cloud mailboxes with Exchange Online Protection for inbound email filtering.
Available plans
For detailed plan information on subscriptions that enable users for Microsoft Defender for Office, see the Microsoft 365 business plan comparison and Microsoft 365 Enterprise plan comparison .
For detailed plan information on subscriptions that enable users for Microsoft Defender for Office and are currently available in European Economic Area (EEA) countries and Switzerland see the Microsoft 365 business plan comparison for EEA and Microsoft 365 Enterprise plan comparison for EEA .
Feature availability
The following table lists the major Microsoft Defender for Office 365 features available across plans. Certain caveats apply. See the footnotes for further information. This table may change without notice. For the most up-to-date, complete list of Microsoft Defender for Office 365 features across plans, see Microsoft Defender for Office 365 Features service description .
Microsoft Defender for Office 365 is a component of Microsoft Defender XDR. For more information on automated cross-domain security with Microsoft Defender XDR, see Microsoft Defender XDR requirements .
For more information about Microsoft Defender for Office 365, check out the following resources:
- Microsoft Defender for Office 365 documentation
- Microsoft Defender for Office 365 product information
- Microsoft Defender for Office 365 blog
- Microsoft Defender for Office 365 forum
Licensing terms
For licensing terms and conditions for products and services purchased through Microsoft Commercial Volume Licensing Programs, see the Product Terms site .
For Microsoft Defender for Office 365 Plan 1 tenants, licenses must be acquired for users or mailboxes falling under one or more of the following scenarios:
- Any user that accesses a mailbox that benefits from Defender for Office 365 protections.
- Shared mailboxes that benefit from Defender for Office 365 protections.
- If Safe Attachments protection for SharePoint, OneDrive for Business, or Teams is turned on, all users that access SharePoint, OneDrive for Business, or Teams.
- Any user that uses Microsoft 365 Apps or Teams when Safe Links protections are enabled.
For Microsoft Defender for Office 365 Plan 2 tenants, licenses must be acquired for users or mailboxes falling under one or more of the following scenarios:
- All Exchange Online users on the tenant. This is because Plan 2 features and capabilities protect all users in the tenant.
- All shared mailboxes on the tenant.
Office 365 E5, Microsoft 365 E5 Security, and Microsoft 365 E5 include Microsoft Defender for Office P2 licenses, and Microsoft 365 Business Premium includes Microsoft Defender for Office 365 P1 licenses.
To stay informed of upcoming changes, including new and changed features, planned maintenance, or other important announcements, visit the Message Center. For more information, see Message center .
Accessibility
Microsoft remains committed to the security of your data and the accessibility of our services. For more information, see the Microsoft Trust Center and the Office Accessibility Center .
Was this page helpful?
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback .
Submit and view feedback for
Additional resources
- Create a presentation Article
- Add and format Article
- Design a presentation Article
- Share and collaborate Article
- Give a presentation Article
- Set up your mobile apps Article
- Learn more Article
Create a presentation
Create a presentation in powerpoint for the web.
With PowerPoint for the web running in your web browser, you can:
Create presentations that include images, videos, transitions, and animations.
Get to your presentations from your computer, tablet, or phone.
Share and work with others, wherever they are.
If you're using the desktop version of PowerPoint on a Windows PC, see the PowerPoint Quick Start .
If you're using the desktop version of PowerPoint on a Mac, see Office for Mac Quick Start Guides and PowerPoint for Mac Help .
Create, open, and name a presentation
Go to powerpoint.office.com .
Select New blank presentation , open a Recent file, select one of the themes , or start with a presentation template .
To name the presentation, select the title at the top and type a name.
If you need to rename the presentation, select the title and retype the name.
Add a slide
Select the slide you want your new slide to follow.
Select Home > New Slide .
Select Layout and the you type want from the drop-down.
When working in PowerPoint for the web, your work is saved every few seconds. You can select File > Save a Copy to create a duplicate copy in another location.
Or choose File > Download As to save a copy to your device.
When you're online, AutoSave is always on and saves your changes as you work. If at any time you lose your Internet connection or turn it off, any pending changes will sync as soon as you’re back online.
Need more help?
Want more options.
Explore subscription benefits, browse training courses, learn how to secure your device, and more.
Microsoft 365 subscription benefits
Microsoft 365 training
Microsoft security
Accessibility center
Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.
Ask the Microsoft Community
Microsoft Tech Community
Windows Insiders
Microsoft 365 Insiders
Was this information helpful?
Thank you for your feedback.
IMAGES
VIDEO
COMMENTS
Detailed reporting. Advanced cyberthreat hunting. Automated investigation and response. Cyberattack simulation training. Microsoft Defender XDR capabilities, such as cross-domain hunting and incident correlation. Use best-in-class Microsoft security products to prevent and detect cyberattacks across your Microsoft 365 workloads.
Learn how Microsoft 365 Defender (previously Microsoft Threat Protection) can help you secure attack vectors across users, endpoints, cloud apps, and data: h...
Microsoft Defender for Office 365 protects your organization against malicious threats posed by emails, links, and collaboration tools. Learn how you can use...
Taking a deep look at the comprehensive email security capabilities Microsoft Defender for Office 365 provides on top of Exchange Online. We'll take a look a...
Microsoft Defender for Office 365 gets highest rating in SE Labs Enterprise Email Security Services test for Q1 2023. In Q1 2023 Q1, Microsoft was once again part of an evaluation of email security platforms conducted by SE Labs. We are thrilled to announce that Microsoft Defender for Office 365 has once again received an AAA Protection Award ...
New Threat Explorer V3 by Microsoft Defender for Office 365 with improved user experience to detect and investigate pote... 14.9K. Responding to targeted mail attacks with Microsoft 365 Defender AlexanderZagranichnov on May 11 2023 10:22 AM. Spear phishing campaign is a type of attack where phishing emails are tailored to specific organization ...
Get Started. Get started with Defender for Office 365. Preset security policies in EOP and Defender for Office 365. Recommended policy settings for EOP and Defender for Office 365. Configuration analyzer in EOP and Defender for Office 365.
You can learn more about the 365 Training Portal on the About page. Your input greatly aids in keeping this site valuable and current for everyone. Thank you for being a part of this initiative! Graham. Owner/curator. Quickly access the top Microsoft Security training, resources, and documentation from Microsoft via the 365 Training Portal.
Microsoft Defender for Identity requires its own add-on license; it's also part of Enterprise Mobility + Security (EMS E5), which in itself is part of Microsoft 365 E5. Microsoft Defender for Office 365. Microsoft Defender for Office 365 builds on top of Exchange Online Protection (EOP) that all users of Exchange in the cloud are protected by.
An introduction to Microsoft Defender for Business presentation. directorcia Microsoft 365 March 31, 2022 1 Minute. I recently presented on Microsoft Defender for Business along with the other options in the Microsoft Defender for Endpoint. The slides from that presentation can be found here:
Learn how to quickly get started and start benefiting from Microsoft 365 Defender (previously Microsoft Threat Protection) capabilities: https://msft.it/6001...
and troubleshoot Microsoft Defender for Office 365 and the ability to investigate security incidents. Methodology Learn by example Participate in group discussions and learn by presentations and demonstrations. Scope This offering is scoped for Microsoft Defender for Office 365. Agenda Day 1 Microsoft Defender for Office 365 Overview, Anti-
Main security features of Microsoft Defender For Office 365. Phishing remains one of the oldest yet most persistent cyber threats facing organizations. Despite its long history, it's not going away but evolving, becoming one of the leading attack vectors for cybercriminals, often leading to ransomware.
In this video I cover a high level introduction to Microsoft Defender for Office 365. This includes the feature set for both Plan 1 and Plan 2 which can be p...
In this article. Microsoft Defender for Office 365 is a cloud-based email filtering service that helps protect your organization against advanced threats to email and collaboration tools, like phishing, business email compromise, and malware attacks. Defender for Office 365 also provides investigation, hunting, and remediation capabilities to ...
We deploy Outlook Report Message and train our users to use it. We also measure its use in attack simulation. We have the option to copy user submissions to a designated SecOps mailbox which I keep an eye on.
Select New blank presentation, open a Recent file, select one of the themes, or start with a presentation template. To name the presentation, select the title at the top and type a name. If you need to rename the presentation, select the title and retype the name.
Microsoft Defender for Office365 (Safe link) is considering a legitimate URL as malicious and users are not able to open the link. How to ensure the link is..