Defender for Office 365 preset security policies
Timelines and exceptionsTimeline
From the capture of 8 Oct 23:13 UTC · an earlier observationLegacy capture: table structure or oversized sections are unavailable for extraction
Microsoft's revision log on this page · 33 entries
Dates from the page's own change log or history section. They describe earlier edits, not upcoming policy.
- Preset security policies in cloud organizationsRecommendation
- Use the Microsoft Defender portal to assign Standard and Strict preset security policies to usersRequirementExceptionScope10 conditions
- Use the Microsoft Defender portal to add exclusions to the Built-in protection preset security policyExceptionRecommendation1 condition
- Use the Microsoft Defender portal to add exclusions to the Built-in protection preset security policyExceptionScope3 conditions
Get-AntiPhishPolicyGet-HostedContentFilterPolicyGet-MalwareFilterPolicyGet-SafeAttachmentPolicyGet-SafeLinksPolicyRecommendPolicyTypeWrite-OutputGet-MalwareFilterPolicyWhere-ObjectRecommendedPolicyTypeGet-HostedContentFilterPolicyGet-AntiPhishPolicyGet-SafeAttachmentPolicyRecommendPolicyTypeWrite-OutputGet-MalwareFilterPolicyWhere-ObjectRecommendedPolicyTypeGet-HostedContentFilterPolicyGet-AntiPhishPolicyGet-SafeAttachmentPolicyBuilt-InGet-ATPBuiltInProtectionRuleWrite-OutputGet-EOPProtectionPolicyRuleFormat-TableDisable-EOPProtectionPolicyRuleEnable-EOPProtectionPolicyRule- Use PowerShell to specify recipient conditions and exceptions for preset security policiesRequirementException1 condition
Set-ATPBuiltInProtectionRuleBuilt-InExceptIfRecipientDomainIsExceptIfSentToExceptIfSentToMemberOfAllowClickThroughEnableForInternalSenders- Policy settings in preset security policiesRecommendation
Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.
Observed history and review priority
Captured 8 Oct 23:13 UTC; extracted 16 Oct 16:10 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c/legacy.
Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.
Retained observations · 2
Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.
- 12 Oct 23:53 UTC · 46 candidates
- 8 Oct 23:13 UTC · 41 candidates