Microsoft Defender for Office 365: Agentic AI Phish Submission Analysis & Response

🚨 The Signal: Microsoft Defender for Office 365 now uses agentic AI to analyse user-reported phishing emails, providing faster, more detailed verdicts. This enhances threat intelligence and response, improving the accuracy of phishing detection and reducing manual analysis overhead.

The Impact

Security teams are affected by improved phishing analysis, reducing manual effort and enhancing threat intelligence.

• Security Teams: Reduced manual effort in analysing reported phishing emails.
• Security Teams: Improved accuracy and speed of phishing threat intelligence.
• Security Teams: Better understanding of reported threats through natural language explanations.

The Action

1. Review existing MDO submission policies to ensure user submissions are directed to Microsoft for analysis: Microsoft 365 Defender portal > Email & collaboration > Policies & rules > Threat policies > Submissions.
2. Familiarise security analysts with the new AI-driven verdict explanations within the MDO submission portal.

Domain: Defender · Impact: medium · Workload: Microsoft Defender