ORCA.107 - End-user spam notification is enabled.
Overview
Enable End-user Spam notifications to let users manage their own spam-quarantined messages (Release, Block sender, Review). End-user spam notifications contain a list of all spam-quarantined messages that the end-user has received during a time period. Policies that do not apply to a spam policy as either a spam, or bulk action, will appear disabled below.
Remediation action
Enable End-user Spam notifications on a quarantine policy.
Related Links
- Configure end-user spam notifications in Exchange Online
- Microsoft 365 Defender Portal - Anti-spam settings
- Recommended settings for EOP and Office 365 Microsoft Defender for Office 365 security
Test Metadata
| Field | Value |
|---|---|
| Test ID | ORCA.107 |
| Severity | Low |
| Suite | ORCA |
| Product | Defender |
| Related products | Exchange Online |
| Feature | Quarantine |
| Area | Email and collaboration protection |
| Resource type | Policy |
| User impact | Low |
| Implementation cost | Low |
| MITRE ATT&CK | None |
| PowerShell test | Test-ORCA107 |
| Services | ExchangeOnline |
Source
- Test:
tests/orca/Test.ORCA.107.ps1 - Documentation:
tests/orca/Test.ORCA.107.md