Security
Microsoft Defender for Office 365
An email and collaboration security solution that helps stop phishing, business email compromise, malicious links, unsafe attachments, and post-delivery threats.
Product
Microsoft Defender for Office 365Microsoft Defender for Office 365 protects Exchange Online and Microsoft 365 collaboration workloads from phishing, malware, business email compromise, malicious links, unsafe attachments, and post-delivery threats. It helps security teams investigate campaigns across senders, recipients, messages, files, and URLs, with those signals correlated through Microsoft Defender XDR.
How it works
- Email protection evaluates spam, malware, spoofing, sender reputation, and suspicious message characteristics.
- Safe Attachments analyzes potentially dangerous files in an isolated environment.
- Safe Links evaluates URLs and can block users from known or newly identified malicious destinations.
- Anti-phishing protection identifies impersonation, credential theft, and business email compromise attempts.
- Investigation tools connect related messages, recipients, files, links, and attacker infrastructure.
- Automated investigation and response helps identify affected mailboxes and remediate malicious content.
- Email evidence is correlated with endpoint, identity, and cloud application activity in Microsoft Defender XDR.
A problem it solves
Attackers impersonate a supplier and send a payment-change request to the finance team. The messages direct employees to a fake Microsoft 365 sign-in page. Microsoft Defender for Office 365 detects the impersonation and phishing indicators, evaluates the link, and helps security analysts find and remove related messages.