Microsoft Defender for Office 365

Product

Microsoft's email and collaboration security service that adds Safe Links, Safe Attachments and impersonation protection (Plan 1) plus investigation, response and attack simulation tools (Plan 2) on top of Exchange Online Protection.

Title graphic: Microsoft Defender for Office 365 (Product)

Type	Product

Key points about Microsoft Defender for Office 365

Defender for Office 365 is more than antivirus for email; it protects email, Teams, SharePoint and OneDrive against phishing, malicious links and malware. · Microsoft Defender for Office 365 - Simply…
Running Defender for Office 365 on defaults is not tuning; the protection is the policy that was reviewed, not the one shipped. · Defender for Office 365
For advanced threats, the episode discusses upgrading to Microsoft Defender for Office 365. · Exchange Online Protection (EOP) - Simply…

Episodes about Microsoft Defender for Office 365

Microsoft Defender for Office 365 - Simply Explained

2026-07-22 · Video on YouTube

Modern phishing emails copy real branding and writing styles, so a basic spam filter no longer keeps a business safe. This episode is for Microsoft 365 admins, security teams and business owners. You learn how the five protection layers of Microsoft Defender…

Defender for Office 365

2026-10-29 · Video on YouTube

Most tenants run Microsoft Defender for Office 365 on defaults and assume they are protected while attackers test their filters every day. This episode is for email security admins, security engineers and SOC teams who want to tune anti-phishing, Safe Links…

Tune Microsoft Defender for Office 365 Against Phishing

2025-08-05 · Video on YouTube

Your users still click phish—even with Defender for M365 “fully enabled.” The culprit isn’t the attackers; it’s misaligned layers: Safe Links, Safe Attachments, anti-phishing ML, and mail flow rules that overlap, conflict, or leave gaps. This guide traces how…

Exchange Online Protection (EOP) - Simply Explained

2026-07-22 · Video on YouTube

Every Microsoft 365 tenant already has email protection, but few admins know where it stops. This episode breaks down Exchange Online Protection's three filtering layers, the zero-hour auto purge safety net and the gaps attackers exploit. Small and mid-sized…

Timeline of episodes about Microsoft Defender for Office 365

Articles about Microsoft Defender for Office 365 (1)

Preset vs Custom Anti-Phishing Policies in Microsoft Defender for Office 365
2026-10-29 · Mirko Peters
Learn when to use preset vs custom anti-phishing policies in Microsoft Defender for Office 365, avoid precedence traps, and secure your cloud tenant.

Frequently asked questions

What is Microsoft Defender for Office 365?

It is a cloud-based security service that protects email, calendar and documents, plus Teams, SharePoint and OneDrive, from phishing, malicious links and malware. It is not a separate app you install. · From the episode: Microsoft Defender for Office 365 - Simply…

Is Defender for Office 365 just antivirus for email?

No. The episode describes it as five layers of protection that work together, each catching what the others might miss, rather than a single scanning tool. · From the episode: Microsoft Defender for Office 365 - Simply…

How does Defender for Office 365 detect impersonation of executives?

It builds a profile of normal communication patterns in the organization. When a message deviates, for example an email that the CEO has never sent in that style, it blocks it and raises an alert. · From the episode: Microsoft Defender for Office 365 - Simply…

Are the default Defender for Office 365 settings enough?

Defaults are often treated as protection after a rollout, but the episode argues tuning is a measurement loop, not a one-time configuration. Attackers keep changing what they send, so policies need review. · From the episode: Defender for Office 365

How do you tune anti-phishing policies in Defender for Office 365?

Set a policy, measure what it catches and misses, adjust and repeat. Impersonation protection and preset policies are part of that loop. · From the episode: Defender for Office 365

Glossary

Community wiki

Short info above, community knowledge below: add practical tips, examples or corrections. New contributions are reviewed first; trusted members publish directly.

Experts and companies for this topic

Nobody has listed this topic yet. Add it to your profile.

Sources

Feed for this topic (RSS): entity/defender-for-office-365/feed.xml
M365.FM episodes on this topic: 4
Articles on this topic: 1

Maintained by Mirko Peters (Microsoft MVP) · Last updated: 2026-11-03