Microsoft Defender for Office 365: Enabling malware filter bypass for SecOps Mailboxes

Originally posted by Microsoft May 4, 2023 Uncategorized 0 Comments

We are adding the ability for security admins and security operations (SecOps) teams to triage messages with malware verdicts for their own review and analysis. This update enables malware filter bypass on messages delivered to configured SecOps mailboxes in the advanced delivery policy.

This message is associated with Microsoft 365 Roadmap ID 124818

When this will happen:

We will begin rolling out at the end of May and complete by end of June.

How this will affect your organization:

Security admins can now review messages with malware verdicts delivered to configured SecOps mailboxes in the advanced delivery policy. With this update, messages with malware verdicts will be delivered for any existing or newly configured mailboxes.

What you need to do to prepare:

Please review configured SecOps mailboxes in the advanced delivery policy to add or remove any mailboxes. No additional actions are required to enable this update.

Learn more about how to the configure advanced delivery policy: Configure the delivery of third-party phishing simulations to users and unfiltered messages to SecOps mailboxes – Office 365 | Microsoft Learn

Message ID: MC550035