Skip to content
English
Contact us
  • There are no suggestions because the search field is empty.

Anti-Phishing Mailtips Check [CHK-1058]

This check verifies if anti-phishing Mailtips are enabled in Outlook.

Rationale

Mailtips are warning messages that alert users to potential phishing attempts in emails. They are triggered by certain characteristics, such as unfamiliar senders, similar domain names, similar usernames, and unusual characters in the email address.

Fix

An automated fix is available through Attic.

Manual steps:

  1. Navigate to the Defender for Office 365 portal.
  2. Select "Email and collaboration" from the left-hand menu.
  3. Select "Policies and rules" from the left-hand menu.
  4. Select "Threat policies".
  5. Select "Anti-phishing".
  6. Select the default policy.
  7. Click on "Edit protection settings".
  8. Under "Safety tips & indicators", enable the desired mailtips. Available options depend on your Defender license.
  9. Click on "Save" to apply the changes.

Impact

Enabling Mailtips increases user awareness of potential phishing attempts, enhancing the organization's overall cybersecurity posture.

More Information

For more details, refer to the Microsoft Defender for Office 365 portal.