You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# The Microsoft Defender for Office 365 Overview dashboard
28
28
29
-
The Microsoft Defender for Office 365 dashboard in the Microsoft Defender portal shows the effectiveness of Defender for Office 365. You open the dashboard in the [Defender portal](https://security.microsoft.com) at **Email & collaboration**\>**Overview**, or directly at <https://security.microsoft.com/emailandcollaborationoverviewreport>.
29
+
The Microsoft Defender for Office 365 Overview dashboard in the Microsoft Defender portal shows the effectiveness of Defender for Office 365. You open the dashboard in the [Defender portal](https://security.microsoft.com) at **Email & collaboration**\>**Overview**, or directly at <https://security.microsoft.com/emailandcollaborationoverviewreport>.
30
30
31
31
The information on the **Overview** page is organized into the following areas:
32
32
@@ -59,9 +59,9 @@ The graph on the **Efficacy** card visually represents the protection given by D
59
59
- User deletions.
60
60
- Non-Microsoft security provider deletions.
61
61
62
-
The percentage value shown is the number of messages in each category divided by the total number of total malicious malware and phishing email during the review period you selected at the top of the page (30 days (default), 60 days, or 90 days).
62
+
The percentage value is the number of messages in each category divided by the total number of malicious malware and phishing email during the review period you selected at the top of the page (30 days (default), 60 days, or 90 days).
63
63
64
-
Hover over a category in the chart to see the number of messages in each category for the review period.
64
+
Hover over a category in the chart to see the number of messages in each category for the review period. Hover over the percentage to see the total number of messages
65
65
66
66
:::image type="content" source="media/email-collab-overview-mdo-efficacy.png" alt-text="Screenshot of the Efficacy card in the Defender for Office 365 section of the Email & collaboration overview report page." lightbox="media/email-collab-overview-mdo-efficacy.png":::
67
67
@@ -71,7 +71,7 @@ Hover over a category in the chart to see the number of messages in each categor
71
71
> - False negatives undetected by Microsoft aren't included in the efficacy calculations. Submitting undetected entities enables us to include those counts in the **Uncaught** calculations.
72
72
> - False positives detected by Microsoft are removed from the efficacy calculations.
73
73
>
74
-
> Based on customer feedback, we determined the **Pre-delivery**, **Post-delivery**, and **Uncaught** components most accurately reflect an organization's protection state. To create a different efficacy calculation, see [Build custom email security reports and dashboards with workbooks in Microsoft Sentinel](https://techcommunity.microsoft.com/blog/microsoftdefenderforoffice365blog/build-custom-email-security-reports-and-dashboards-with-workbooks-in-microsoft-s/4352242) or the advanced hunting query in the [Appendix](#appendix-advanced-hunting-efficacy-query-in-defender-for-office-365-plan-2) section.
74
+
> Based on customer feedback, we determined the **Pre-delivery**, **Post-delivery**, and **Uncaught** components most accurately reflect an organization's protection state. To create a different efficacy report, see [Build custom email security reports and dashboards with workbooks in Microsoft Sentinel](https://techcommunity.microsoft.com/blog/microsoftdefenderforoffice365blog/build-custom-email-security-reports-and-dashboards-with-workbooks-in-microsoft-s/4352242) or the advanced hunting query in the [Appendix](#appendix-advanced-hunting-efficacy-query-in-defender-for-office-365-plan-2) section.
75
75
76
76
### Threat detections card
77
77
@@ -128,9 +128,9 @@ Hover over a category in the chart to see the number of **Onboarded** priority a
128
128
129
129
The graph on the **Policy recommendations** card shows the number of users protected by [Safe Links](safe-links-about.md) and [Safe Attachments](safe-attachments-about.md) as a percentage of the total number of users (the value 100% means everyone is protected).
130
130
131
-
Hover over a category in the chart to see the number of **Impacted users** (the total number of users in the organization) and **Protected users** (those who get Safe Links or Safe Attachments protection).
131
+
Hover over a category in the chart to see the number of **Impacted users** (the total number of users in the organization) and **Protected users** (users who get Safe Links or Safe Attachments protection).
132
132
133
-
Although the [Built-in protection](preset-security-policies.md#preset-security-policies-in-eop-and-microsoft-defender-for-office-365) preset security policy give a basic level of Safe Links and Safe Attachments protection to all users by default (and you can [exclude recipients](preset-security-policies.md#use-the-microsoft-defender-portal-to-add-exclusions-to-the-built-in-protection-preset-security-policy)), users get a higher level of protection from the following settings:
133
+
Although the [Built-in protection](preset-security-policies.md#preset-security-policies-in-eop-and-microsoft-defender-for-office-365) preset security policy gives a basic level of Safe Links and Safe Attachments protection to all users by default (and you can [exclude recipients](preset-security-policies.md#use-the-microsoft-defender-portal-to-add-exclusions-to-the-built-in-protection-preset-security-policy)), users get a higher level of protection from the following settings:
134
134
135
135
- Membership in the **Apply Defender for Office 365 protection** setting in the [standard or Strict preset security policies](preset-security-policies.md#use-the-microsoft-defender-portal-to-assign-standard-and-strict-preset-security-policies-to-users).
136
136
- Membership in a custom [Safe Links](safe-links-policies-configure.md#use-the-microsoft-defender-portal-to-create-safe-links-policies) or [Safe Attachment](safe-attachments-policies-configure.md#use-the-microsoft-defender-portal-to-create-safe-attachments-policies) policies.
@@ -169,7 +169,7 @@ The **Tenant allow types** card shows a table with the types of allow entries in
169
169
170
170
<!--- https://go.microsoft.com/fwlink/?linkid=2324013 should go to https://admin.cloud.microsoft/exchange#/transportrules; instead goes to https://security.microsoft.com/emailandcollabreport --->
171
171
172
-
The **Exchange transport rules** card shows the mail flow rules (also known as transport rules) that allowed messages that would otherwise have been blocked:
172
+
The **Exchange transport rules** card shows the mail flow rules (also known as transport rules) that allowed messages that would otherwise be blocked:
173
173
174
174
-**Rule ID**
175
175
-**Messages allowed**: The number of messages allowed during the review period you selected at the top of the page (30 days (default), 60 days, or 90 days).
@@ -188,7 +188,7 @@ The information in the **Compare solutions** section is described in the followi
188
188
189
189
The graph on the **Email detections** shows Microsoft and non-Microsoft detections as part of [ICES Vendor Ecosystem integration](mdo-ices-vendor-ecosystem.md):
The graph on the **Microsoft 365 Secure Email Gateway performance** card compares the effectiveness of Defender for Office 365 against other secure email gateways. To ensure fairness, the number of misses are normalized per 1000 active users.
239
+
The graph on the **Microsoft 365 Secure Email Gateway performance** card compares the effectiveness of Defender for Office 365 against other secure email gateways. To ensure fairness, the number of missed messages is normalized per 1,000 active users.
240
240
241
241
:::image type="content" source="media/email-collab-overview-insights-m365-secure-email-gateway.png" alt-text="Screenshot of the Microsoft 365 Secure Email Gateway performance card in the Insights section of the Email & collaboration overview report page." lightbox="media/email-collab-overview-insights-m365-secure-email-gateway.png":::
242
242
243
243
## Appendix: Advanced hunting efficacy query in Defender for Office 365 Plan 2
244
244
245
-
Organizations with Defender for Office 365 Plan 2 can use the following query in [advanced hunting](/defender-xdr/advanced-hunting-overview) to generate the same data that's shown on the [**Efficacy** card](#efficacy-card).
245
+
Organizations with Defender for Office 365 Plan 2 can use the following query in [advanced hunting](/defender-xdr/advanced-hunting-overview) to generate the same data on the [**Efficacy** card](#efficacy-card).
246
246
247
247
> [!NOTE]
248
248
> The numbers might differ slightly due to the different refresh rates for advanced hunting vs. reporting data.
0 commit comments