ORCA.120.1 - Zero Hour Autopurge Enabled for Phish.
Overview
Zero Hour Autopurge can assist removing false-negatives post detection from mailboxes. By default, it is enabled.
Remediation action
Enable Zero Hour Autopurge.
Related Links
- Microsoft 365 Defender Portal - Anti-spam settings
- Recommended settings for EOP and Microsoft Defender for Office 365 security
- Zero-hour auto purge - protection against spam and malware
Test Metadata
| Field | Value |
|---|---|
| Test ID | ORCA.120.1 |
| Severity | Medium |
| Suite | ORCA |
| Category | EXO |
| PowerShell test | Test-ORCA120_phish |
| Tags | EXO, ORCA, ORCA.120.1 |
Source
- Pester test:
tests/orca/Test-ORCA120_phish.Tests.ps1 - PowerShell source:
powershell/public/orca/Test-ORCA120_phish.ps1