Learn about the robust security solutions in Defender for Office 365 to better protect your email and collaboration tools.

Microsoft Defender for Office 365 is a cloud-based email filtering service that helps protect your organization against unknown malware and viruses by providing robust zero-day protection, and includes features to safeguard your organization ...

Defender for Office 365 Plan 1 offers protection against advanced cyberattacks across email and collaboration tools in Microsoft 365.

This article describes the Microsoft Defender for Office 365 experience in the Microsoft Defender portal at https://security.microsoft.com.

See *only the steps needed to complete a task* and set up features. Information for use in trial subscriptions and production. Guidance designed to minimize information overload and speed up your configuration and use.

For more information about Safe Documents protection, see Safe Documents in Microsoft 365 E5. Protection for SharePoint, OneDrive, and Microsoft Teams helps detect and block files that are identified as malicious in team sites and document libraries. In addition, Safe Links protection is now available in Microsoft Teams channels and chats. Anti-phishing checks incoming messages for indicators that a message might be a phishing attempt. When users are covered by Defender for Office 365 policies (Safe Attachments, Safe Links, or anti-phishing), incoming messages are evaluated by multiple machine learning models that analyze messages and the appropriate action is taken, based on the configured policies.

You need to enable JavaScript to run this app

Sensitive accounts SHALL be added to Defender for Office 365 protection in the strict preset security policy. Rationale: Unauthorized access to a sensitive account may result in greater harm than to a standard user account. Adding sensitive accounts to the strict preset security policy, with its increased protections, better mitigates their elevated risk. ... Note: The strict preset security policy must be enabled to protect sensitive accounts. ... Use the Microsoft 365 Defender portal to assign Standard and Strict preset security policies to users | Microsoft Learn

In new Microsoft 365 organizations with Microsoft Defender for Office 365 (included or as an add-on subscription), this article describes the configuration steps you need to do in the earliest days of your organization.

March 15, 2023 - This Microsoft security service includes filtering, hunting, remediation, and investigation capabilities. Here are the three main use cases for Defender for Office 365:

Altogether, Microsoft Defender 365 combines a variety of protection, detection, investigation and response capabilities in one central portal. Defender for Office 365 protects and secures an organization’s Office 365 environment by detecting threats present in email and collaboration tools.

This article explains the protection ladder for email and collaboration. The ladder starts with the default email protections for cloud mailboxes, and continues to Defender for Office 365 Plan 1 and Defender for Office 365 Plan 2.

April 24, 2022 - The policies can be found in the “Threat Policies” section of the Microsoft 365 Security Portal and offer two “flavors” of protection: Standard and Strict. The policies align with the Standard and Strict levels defined in the Microsoft recommendation documentation and once configured, there is no customization involved. The policies can be assigned to users, groups, or mail domains, similar to any Defender for Office 365 Policies.

Microsoft Defender for Office 365 · Microsoft Defender for Endpoint · Microsoft Defender for Cloud Apps · Investigate incidents · Track and respond to emerging threats · Automated investigation and response · Hunt for threats ·

July 6, 2024 - In this post I want to give you a summary about what Microsoft Defender for Office 365 is exactly and how you can quickly set up and configure it by using Microsoft's best practices. Microsoft Defender for Office 365 is a seamless integration into your Office 365 subscription that protects against threats in email, links (URLS),

A prescriptive playbook for SecOps personnel to manage Microsoft Defender for Office 365.

Microsoft Defender for Office 365 licensing diagram from the m365maps.com collection by Aaron Dinnage

July 17, 2025 - Microsoft Defender for Microsoft 365 offers Plan 1 and Plan 2 license, which includes pre-existing functionalities and pre-set configurations according to your requirements. With a Plan 1 license, system administrators are offered tools such as Safe-Links and Safe-Attachments. These tools help protect Exchange Online, SharePoint Online, OneDrive, and Teams against harmful content in documents and hyperlinks.

May 12, 2025 - The goal of Microsoft 365 Defender is to provide integrated threat protection against malware and sophisticated attacks. Essentially, Defender for Office 365 targets malicious threats that can occur through email and the use of Microsoft 365.

The tables contain the settings in the Microsoft Defender portal and Exchange Online PowerShell. ... You can use the configuration analyzer to compare the settings in custom threat policies to the recommended Standard or Strict values. For more information, see Configuration analyzer for threat policies. The Office 365 Advanced Threat Protection Recommended Configuration Analyzer (ORCA) module for PowerShell can help admins find the current values of these settings.