Skip to content

Commit 13d2d1b

Browse files
committed
Update reports-mdo-email-collaboration-dashboard.md
Acrolinx
1 parent b17fbca commit 13d2d1b

File tree

1 file changed

+13
-13
lines changed

1 file changed

+13
-13
lines changed

defender-office-365/reports-mdo-email-collaboration-dashboard.md

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: Defender for Office 365 dashboard
2+
title: Defender for Office 365 Overview dashboard
33
f1.keywords:
44
- CSH
55
ms.author: chrisda
@@ -15,7 +15,7 @@ ms.assetid:
1515
ms.collection:
1616
- m365-security
1717
- tier2
18-
description: Admins can learn about the information on the Microsoft Defender for Office 365 dashboard in the Microsoft Defender portal.
18+
description: Admins can learn about the information on the Microsoft Defender for Office 365 Overview dashboard in the Microsoft Defender portal.
1919
ms.custom:
2020
ms.service: defender-office-365
2121
ms.date: 6/26/2025
@@ -24,9 +24,9 @@ appliesto:
2424
- ✅ <a href="https://learn.microsoft.com/defender-xdr/microsoft-365-defender" target="_blank">Microsoft Defender XDR</a>
2525
---
2626

27-
# The Microsoft Defender for Office 365 dashboard
27+
# The Microsoft Defender for Office 365 Overview dashboard
2828

29-
The Microsoft Defender for Office 365 dashboard in the Microsoft Defender portal shows the effectiveness of Defender for Office 365. You open the dashboard in the [Defender portal](https://security.microsoft.com) at **Email & collaboration** \> **Overview**, or directly at <https://security.microsoft.com/emailandcollaborationoverviewreport>.
29+
The Microsoft Defender for Office 365 Overview dashboard in the Microsoft Defender portal shows the effectiveness of Defender for Office 365. You open the dashboard in the [Defender portal](https://security.microsoft.com) at **Email & collaboration** \> **Overview**, or directly at <https://security.microsoft.com/emailandcollaborationoverviewreport>.
3030

3131
The information on the **Overview** page is organized into the following areas:
3232

@@ -59,9 +59,9 @@ The graph on the **Efficacy** card visually represents the protection given by D
5959
- User deletions.
6060
- Non-Microsoft security provider deletions.
6161

62-
The percentage value shown is the number of messages in each category divided by the total number of total malicious malware and phishing email during the review period you selected at the top of the page (30 days (default), 60 days, or 90 days).
62+
The percentage value is the number of messages in each category divided by the total number of malicious malware and phishing email during the review period you selected at the top of the page (30 days (default), 60 days, or 90 days).
6363

64-
Hover over a category in the chart to see the number of messages in each category for the review period.
64+
Hover over a category in the chart to see the number of messages in each category for the review period. Hover over the percentage to see the total number of messages
6565

6666
:::image type="content" source="media/email-collab-overview-mdo-efficacy.png" alt-text="Screenshot of the Efficacy card in the Defender for Office 365 section of the Email & collaboration overview report page." lightbox="media/email-collab-overview-mdo-efficacy.png":::
6767

@@ -71,7 +71,7 @@ Hover over a category in the chart to see the number of messages in each categor
7171
> - False negatives undetected by Microsoft aren't included in the efficacy calculations. Submitting undetected entities enables us to include those counts in the **Uncaught** calculations.
7272
> - False positives detected by Microsoft are removed from the efficacy calculations.
7373
>
74-
> Based on customer feedback, we determined the **Pre-delivery**, **Post-delivery**, and **Uncaught** components most accurately reflect an organization's protection state. To create a different efficacy calculation, see [Build custom email security reports and dashboards with workbooks in Microsoft Sentinel](https://techcommunity.microsoft.com/blog/microsoftdefenderforoffice365blog/build-custom-email-security-reports-and-dashboards-with-workbooks-in-microsoft-s/4352242) or the advanced hunting query in the [Appendix](#appendix-advanced-hunting-efficacy-query-in-defender-for-office-365-plan-2) section.
74+
> Based on customer feedback, we determined the **Pre-delivery**, **Post-delivery**, and **Uncaught** components most accurately reflect an organization's protection state. To create a different efficacy report, see [Build custom email security reports and dashboards with workbooks in Microsoft Sentinel](https://techcommunity.microsoft.com/blog/microsoftdefenderforoffice365blog/build-custom-email-security-reports-and-dashboards-with-workbooks-in-microsoft-s/4352242) or the advanced hunting query in the [Appendix](#appendix-advanced-hunting-efficacy-query-in-defender-for-office-365-plan-2) section.
7575
7676
### Threat detections card
7777

@@ -128,9 +128,9 @@ Hover over a category in the chart to see the number of **Onboarded** priority a
128128

129129
The graph on the **Policy recommendations** card shows the number of users protected by [Safe Links](safe-links-about.md) and [Safe Attachments](safe-attachments-about.md) as a percentage of the total number of users (the value 100% means everyone is protected).
130130

131-
Hover over a category in the chart to see the number of **Impacted users** (the total number of users in the organization) and **Protected users** (those who get Safe Links or Safe Attachments protection).
131+
Hover over a category in the chart to see the number of **Impacted users** (the total number of users in the organization) and **Protected users** (users who get Safe Links or Safe Attachments protection).
132132

133-
Although the [Built-in protection](preset-security-policies.md#preset-security-policies-in-eop-and-microsoft-defender-for-office-365) preset security policy give a basic level of Safe Links and Safe Attachments protection to all users by default (and you can [exclude recipients](preset-security-policies.md#use-the-microsoft-defender-portal-to-add-exclusions-to-the-built-in-protection-preset-security-policy)), users get a higher level of protection from the following settings:
133+
Although the [Built-in protection](preset-security-policies.md#preset-security-policies-in-eop-and-microsoft-defender-for-office-365) preset security policy gives a basic level of Safe Links and Safe Attachments protection to all users by default (and you can [exclude recipients](preset-security-policies.md#use-the-microsoft-defender-portal-to-add-exclusions-to-the-built-in-protection-preset-security-policy)), users get a higher level of protection from the following settings:
134134

135135
- Membership in the **Apply Defender for Office 365 protection** setting in the [standard or Strict preset security policies](preset-security-policies.md#use-the-microsoft-defender-portal-to-assign-standard-and-strict-preset-security-policies-to-users).
136136
- Membership in a custom [Safe Links](safe-links-policies-configure.md#use-the-microsoft-defender-portal-to-create-safe-links-policies) or [Safe Attachment](safe-attachments-policies-configure.md#use-the-microsoft-defender-portal-to-create-safe-attachments-policies) policies.
@@ -169,7 +169,7 @@ The **Tenant allow types** card shows a table with the types of allow entries in
169169

170170
<!--- https://go.microsoft.com/fwlink/?linkid=2324013 should go to https://admin.cloud.microsoft/exchange#/transportrules; instead goes to https://security.microsoft.com/emailandcollabreport --->
171171

172-
The **Exchange transport rules** card shows the mail flow rules (also known as transport rules) that allowed messages that would otherwise have been blocked:
172+
The **Exchange transport rules** card shows the mail flow rules (also known as transport rules) that allowed messages that would otherwise be blocked:
173173

174174
- **Rule ID**
175175
- **Messages allowed**: The number of messages allowed during the review period you selected at the top of the page (30 days (default), 60 days, or 90 days).
@@ -188,7 +188,7 @@ The information in the **Compare solutions** section is described in the followi
188188

189189
The graph on the **Email detections** shows Microsoft and non-Microsoft detections as part of [ICES Vendor Ecosystem integration](mdo-ices-vendor-ecosystem.md):
190190

191-
- **Defender mailflow detections**
191+
- **Defender mail flow detections**
192192
- **Defender post-delivery detections**
193193
- **Non-Microsoft post-delivery detections**
194194
- **Duplicate detections Duplicate post-delivery detections**
@@ -236,13 +236,13 @@ The **Emerging threats** card shows any notable campaigns observed by Microsoft
236236

237237
<!--- https://go.microsoft.com/fwlink/?linkid=2324014 --->
238238

239-
The graph on the **Microsoft 365 Secure Email Gateway performance** card compares the effectiveness of Defender for Office 365 against other secure email gateways. To ensure fairness, the number of misses are normalized per 1000 active users.
239+
The graph on the **Microsoft 365 Secure Email Gateway performance** card compares the effectiveness of Defender for Office 365 against other secure email gateways. To ensure fairness, the number of missed messages is normalized per 1,000 active users.
240240

241241
:::image type="content" source="media/email-collab-overview-insights-m365-secure-email-gateway.png" alt-text="Screenshot of the Microsoft 365 Secure Email Gateway performance card in the Insights section of the Email & collaboration overview report page." lightbox="media/email-collab-overview-insights-m365-secure-email-gateway.png":::
242242

243243
## Appendix: Advanced hunting efficacy query in Defender for Office 365 Plan 2
244244

245-
Organizations with Defender for Office 365 Plan 2 can use the following query in [advanced hunting](/defender-xdr/advanced-hunting-overview) to generate the same data that's shown on the [**Efficacy** card](#efficacy-card).
245+
Organizations with Defender for Office 365 Plan 2 can use the following query in [advanced hunting](/defender-xdr/advanced-hunting-overview) to generate the same data on the [**Efficacy** card](#efficacy-card).
246246

247247
> [!NOTE]
248248
> The numbers might differ slightly due to the different refresh rates for advanced hunting vs. reporting data.

0 commit comments

Comments
 (0)