ASD's Blueprint for Secure Cloud

User reported settings

This section describes the configuration of user reporting settings within Microsoft Defender associated with systems built according to the guidance provided by ASD's Blueprint for Secure Cloud.

Estimated reading time: 2 minutes

Outlook

ItemValue
Monitor reported messages in OutlookChecked
Use the built-in Report button in OutlookSelected
- Ask the user to confirm before reportingChecked
- Show a success message after the message is reportedChecked

Microsoft Teams

ItemValue
Monitor reported messages in Microsoft TeamsChecked

Reported message destinations

ItemValue
Send reported messages to:Microsoft and my reporting mailbox
Add an exchange online mailbox to send reported messages to:<REPORTING-MAILBOX@ORGANISATION.GOV.AU>

Email notifications

ItemValue
Automatically email users the results of the investigation. Includes results for reported messages from all monitored platforms.Unchecked
Specify a Microsoft 365 mailbox to use as the From address of email notificationsUnchecked
Replace the Microsoft logo with my organization’s logo across all reporting experiences.Checked

Reporting from quarantine

ItemValue
Allow reporting for quarantined messages. Only admins can report quarantined Teams messages.Checked

Security and governance

  • None identified

Design

Configuration

References

Do you have a suggestion on how the above page could be improved? Get in touch! ASD's Blueprint for Secure Cloud is an open source project, and we would love to get your input. Submit an issue on our GitHub, or send us an email at blueprint@asd.gov.au

Acknowledgement of Country icon

Acknowledgement of Country
We acknowledge the Traditional Owners and Custodians of Country throughout Australia and their continuing connections to land, sea and communities. We pay our respects to them, their cultures and their Elders; past, present and emerging. We also recognise Australia's First Peoples' enduring contribution to Australia's national security.

Authorised by the Australian Government, Canberra