Skip to content

Commit dc4be30

Browse files
committed
Update reports-defender-for-office-365.md
Adding dashboard link and Acrolinx (88 to 95).
1 parent b4dd414 commit dc4be30

File tree

1 file changed

+19
-17
lines changed

1 file changed

+19
-17
lines changed

defender-office-365/reports-defender-for-office-365.md

Lines changed: 19 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ description: Admins can learn how to find and use the Defender for Office 365 re
1919
ms.custom:
2020
- seo-marvel-apr2020
2121
ms.service: defender-office-365
22-
ms.date: 3/7/2024
22+
ms.date: 6/27/2025
2323
appliesto:
2424
- ✅ <a href="https://learn.microsoft.com/defender-office-365/mdo-about#defender-for-office-365-plan-1-vs-plan-2-cheat-sheet" target="_blank">Microsoft Defender for Office 365 Plan 1 and Plan 2</a>
2525
- ✅ <a href="https://learn.microsoft.com/defender-xdr/microsoft-365-defender" target="_blank">Microsoft Defender XDR</a>
@@ -37,13 +37,15 @@ Summary information for each report is available on the page. Identify the repor
3737

3838
The rest of this article describes the reports that are exclusive to Defender for Office 365.
3939

40-
> [!NOTE]
40+
> [!TIP]
41+
>
42+
> An Overview dashboard for Microsoft 365 is available at **Email & collaboration** \> **Overview** or directly at <https://security.microsoft.com/emailandcollaborationoverviewreport>. For more information, see [The Microsoft Defender for Office 365 Overview dashboard](reports-mdo-email-collaboration-dashboard.md).
4143
>
4244
> Email security reports that don't require Defender for Office 365 are described in [View email security reports in the Microsoft Defender portal](reports-email-security.md).
4345
>
44-
> For reports that have been deprecated or replaced, see the table in [Email security report changes in the Microsoft Defender portal](reports-email-security.md#email-security-report-changes-in-the-microsoft-defender-portal).
46+
> For deprecated or replaced reports, see the table in [Email security report changes in the Microsoft Defender portal](reports-email-security.md#email-security-report-changes-in-the-microsoft-defender-portal).
4547
>
46-
> Reports that are related to mail flow are now in the Exchange admin center (EAC). For more information about these reports, see [Mail flow reports in the new Exchange admin center](/exchange/monitoring/mail-flow-reports/mail-flow-reports).
48+
> Reports related to mail flow are now in the Exchange admin center (EAC). For more information about these reports, see [Mail flow reports in the new Exchange admin center](/exchange/monitoring/mail-flow-reports/mail-flow-reports).
4749
4850
Watch this short video to learn how you can use reports to understand the effectiveness of Defender for Office 365 in your organization.
4951

@@ -52,16 +54,16 @@ Watch this short video to learn how you can use reports to understand the effect
5254
## Safe Attachments file types report
5355

5456
> [!NOTE]
55-
> This report has been deprecated. The same information is available in the [Threat protection status report](#threat-protection-status-report).
57+
> This report is deprecated. The same information is available in the [Threat protection status report](#threat-protection-status-report).
5658
5759
## Safe Attachments message disposition report
5860

5961
> [!NOTE]
60-
> This report has been deprecated. The same information is available in the [Threat protection status report](#threat-protection-status-report).
62+
> This report is deprecated. The same information is available in the [Threat protection status report](#threat-protection-status-report).
6163
6264
## Mail latency report
6365

64-
The **Mail latency report** shows you an aggregate view of the mail delivery and detonation latency experienced within your Defender for Office 365 organization. Mail delivery times in the service are affected by many factors, and the absolute delivery time in seconds is often not a good indicator of success or a problem. A slow delivery time on one day might be considered an average delivery time on another day, or vice-versa. This report tries to qualify message delivery based on statistical data about the observed delivery times of other messages.
66+
The **Mail latency report** shows you an aggregate view of the mail delivery and detonation latency experienced within your Defender for Office 365 organization. Many factors affect mail delivery times in the service, and the absolute delivery time in seconds is often not a good indicator of success or a problem. A slow delivery time on one day might be considered an average delivery time on another day, or vice-versa. This report tries to qualify message delivery based on statistical data about the observed delivery times of other messages.
6567

6668
Client-side latency and network latency aren't included in the results.
6769

@@ -96,10 +98,10 @@ In the details table below the chart, the following information is available:
9698
Select :::image type="icon" source="media/m365-cc-sc-filter-icon.png" border="false"::: **Filter** to modify the report and the details table by selecting one or more of the following values in the flyout that opens:
9799

98100
- **Date (UTC)**: **Start date** and **End date**
99-
- **Message view**: Select one of tne of the following values:
101+
- **Message view**: Select one of the following values:
100102
- **All email**
101103
- **Detonated email**: After you select this value, select one of the following values that appears:
102-
- **Inline detonation**: Links and attachments in messages are fully tested by Safe Links and Safe Attachments before delivery.
104+
- **Inline detonation**: Safe Links and Safe Attachments fully test links and attachments in messages before delivery.
103105
- **Asynchronous detonation**: [Dynamic delivery](safe-attachments-about.md#dynamic-delivery-in-safe-attachments-policies) of attachments by Safe Attachments and links in email tested by Safe Links after delivery.
104106

105107
When you're finished configuring the filters, select **Apply**, **Cancel**, or :::image type="icon" source="media/m365-cc-sc-clear-filters-icon.png" border="false"::: **Clear filters**.
@@ -119,9 +121,9 @@ On the **Email & collaboration reports** page at <https://security.microsoft.com
119121
On the **Post-delivery activities** page, the chart shows the following information for the specified date range:
120122

121123
- **No threat**: The number of unique delivered messages that were found to be not spam by ZAP.
122-
- **Spam**: The number of unique messages that were removed from mailboxes by ZAP for spam.
123-
- **Phishing**: The number of unique messages that were removed from mailboxes by ZAP for phishing.
124-
- **Malware**: The number of unique messages that were removed from mailboxes by ZAP for phishing.
124+
- **Spam**: The number of unique messages removed from mailboxes by ZAP for spam.
125+
- **Phishing**: The number of unique messages removed from mailboxes by ZAP for phishing.
126+
- **Malware**: The number of unique messages removed from mailboxes by ZAP for phishing.
125127

126128
The details table below the graph shows the following information:
127129

@@ -145,7 +147,7 @@ The details table below the graph shows the following information:
145147
Select :::image type="icon" source="media/m365-cc-sc-filter-icon.png" border="false"::: **Filter** to modify the report and the details table by selecting one or more of the following values in the flyout that opens:
146148

147149
- **Date (UTC)**: **Start date** and **End date**.
148-
- **Updated threat**: Select one ore mor of the following values:
150+
- **Updated threat**: Select one ore more of the following values:
149151
- **No threat**
150152
- **Spam**
151153
- **Phishing**
@@ -186,11 +188,11 @@ The **View data by URL click protection action** view shows the number of URL cl
186188
- **Blocked**: Click blocked.
187189
- **Blocked by tenant admin**: The Clicks blocked in Safe Links policies.
188190
- **Blocked and clicked through**: Blocked clicks where users click through to the blocked URL.
189-
- **Blocked by tenant admin and clicked through**: Admin has blocked the link, but the user clicked through.
191+
- **Blocked by tenant admin and clicked through**: An admin blocked the link, but the user clicked through.
190192
- **Clicked through during scan**: Clicks where users click through the pending scan page to the URL.
191193
- **Pending scan**: Clicks on URLs that are pending a scan verdict.
192194

193-
A click indicates that the user has clicked through the block page to the malicious website (admins can disable click through in Safe Links policies).
195+
A click indicates the user clicked through the block page to the malicious website (admins can disable click through in Safe Links policies).
194196

195197
The details table below the chart provides the following near-real-time view of all clicks that happened within the organization for the last 30 days:
196198

@@ -219,7 +221,7 @@ On the **URL threat protection** page, the :::image type="icon" source="media/m3
219221
:::image type="content" source="media/url-threat-protection-report-url-click-by-application-view.png" alt-text="The URL click protection action view in the URL protection report" lightbox="media/url-threat-protection-report-url-click-by-application-view.png":::
220222

221223
> [!TIP]
222-
> URL clicks by guest users are available in the report. Guest user accounts might be compromised or access malicious content inside the organization.
224+
> URL clicks by guests are available in the report. Guest accounts might be compromised or access malicious content inside the organization.
223225
224226
The **View data by URL click by application** view shows the number of URL clicks by apps that support Safe Links:
225227

@@ -250,7 +252,7 @@ When you're finished configuring the filters, select **Apply**, **Cancel**, or :
250252

251253
On the **URL threat protection** page, the :::image type="icon" source="media/m365-cc-sc-create-icon.png" border="false"::: **[Create schedule](reports-email-security.md#schedule-recurring-reports)**, :::image type="icon" source="media/m365-cc-sc-download-icon.png" border="false"::: **[Request report](reports-email-security.md#request-on-demand-reports-for-download)**, and :::image type="icon" source="media/m365-cc-sc-download-icon.png" border="false"::: **[Export](reports-email-security.md#export-report-data)** actions are available.
252254

253-
## Additional reports to view
255+
## Other reports to view
254256

255257
In addition to the reports described in this article, the following tables describe other available reports that are available:
256258

0 commit comments

Comments
 (0)