Move messages that are detected as impersonated users by mailbox intelligence
Remediation Considerations
| MaxScore | ImplementationCost | UserImpact |
|---|---|---|
| 8 | Medium | Unknown |
Remediation Impact
Unknown
Remediation
Ensure that all users have an assigned anti-phishing policy with the ‘Enable mailbox intelligence’ and ‘Enable intelligence for impersonation protection’ options enabled by either updating your existing policies or creating new ones.
For those policies, ensure that the ‘If mailbox Intelligence detects an impersonated user’ option set to ‘Quarantine the message’ or ‘Move message to the recipients’ junk email folders’.