Endpoint Protection client frequently asked questions.

Troubleshooting Windows Defender or Endpoint Protection client.

You can protect your endpoints using Windows Defender, Windows Defender ATP, and Microsoft Intune.

Plan security settings for VBA macros in Office 2016ĭevice security is one of the three pillars of modern IT security.

Using OneDrive to recover from ransomware attack.

Does OneDrive for Business prevent ransomware attacks.

Ransomware 101: How to Protect and Mitigate Your Environment from Malware (video).

Whaling: how it works, and what your organization can do about it (NCSC guidance).

Windows Defender Security Intelligence: Tech support scams and other scams.

Impact of strict domain authentication checks in EOP/ATP (blog post).

Steps for implementing DMARC for your custom domains.

Steps for implementing DKIM for your custom domains.

Explanation of why Microsoft enabled DKIM-signing by default (blog post).

Safe Links URL decoder (Non-Microsoft website).

View reports for Office 365 Advanced Threat Protection.

Windows Defender Security Intelligence submission portal (submit suspicious files for analysis).

Office 365 ATP for SharePoint, OneDrive, and Microsoft Teams.

Office 365 ATP service description (licensing and feature availability).

Office 365 Advanced Threat Protection (ATP)

SwiftOnSecurity Phishing RegEx Examples.

SwiftOnSecurity Exchange Mail Flow Rules examples.

View email security reports in the Security & Compliance Center.

A short intro to how the Phishing Confidence Level (PCL) works (blog post).

Hooking up additional spam filters in front of or behind Office 365 (blog post).

Submit spam, non-spam, and phishing scam messages to Microsoft for analysis.

Use mail flow rules to set the spam confidence level (SCL) in messages.

Exchange Online Protection service description (licensing and feature availability).

DMARC inspector and DMARC record generator.

Office 365 delist portal (remove yourself from blocked senders list).

MXToolbox (variety of tools for testing MX/SPF/DMARC records, analyzing headers, etc).

Exchange Remote Connectivity Analyzer (includes Message Header Analyzer).

Office 365 provides customers with protection from email-borne threats with Exchange Online Protection (EOP) and Office 365 Advanced Threat Protection (ATP). To stay up to date, subscribe to the Practical 365 newsletter for free. If you have suggestions that you’d like to see included, you can let me know here. I will be maintaining this list as new resources surface. This is a list of Office 365 and Microsoft cloud security resources that I compiled during research for my Office 365 security course at Pluralsight.

Office 365 troubleshooting guide