ORCA.240 - Outlook is configured to display external tags for external emails.
Overview
External tags show users email that is coming from external. EOP & MDO works with native client side integration to clearly highlight external emails. This allows you to train users to identify these emails so that they can be more suspicious about the email contents.
Remediation action
Configure external tags to highlight emails which are sent from external.
Related Links
Test Metadata
| Field | Value |
|---|---|
| Test ID | ORCA.240 |
| Severity | Medium |
| Suite | ORCA |
| Product | Defender |
| Related products | Exchange Online |
| Feature | Tenant settings |
| Area | Email and collaboration protection |
| Resource type | Tenant |
| User impact | Low |
| Implementation cost | Low |
| MITRE ATT&CK | T1566 Phishing |
| Supports controls | nist-800-53-r5:SI-8 |
| PowerShell test | Test-ORCA240 |
| Services | ExchangeOnline |
Source
- Test:
tests/orca/Test.ORCA.240.ps1 - Documentation:
tests/orca/Test.ORCA.240.md