ORCA.235 - SPF records is set up for all your custom domains.

Contributed by Michael SouleAll contributors →

Overview

SPF helps validate outbound email sent from your custom domain. Microsoft 365 uses the Sender Policy Framework (SPF) TXT record in DNS to ensure that destination email systems trust messages sent from your custom domain.

Remediation action

Set up SPF records to prevent spoofing.

Related Links

• Use SPF to validate outbound email sent from your custom domain in Office 365

Test Metadata

Field	Value
Test ID	ORCA.235
Severity	Medium
Suite	ORCA
Product	Defender
Related products	Exchange Online
Feature	Email authentication
Area	Email and collaboration protection
Resource type	Domain
User impact	Low
Implementation cost	Medium
MITRE ATT&CK	T1566 Phishing, T1684.002 Email Spoofing
Supports controls	nist-800-53-r5:SI-8
PowerShell test	Test-ORCA235
Services	ExchangeOnline

Source

• Test: tests/orca/Test.ORCA.235.ps1
• Documentation: tests/orca/Test.ORCA.235.md