defender-for-office-365
Microsoft Defender for Office 365
Microsoft Defender for Office 365 (MDO) protects email and collaboration workloads against phishing, malware, spoofing, and business email compromise. It provides preset policies, detonation (Safe Attachments), time-of-click URL protection (Safe Links), post-delivery detection and hunting (Threat Explorer + AIR), and attack simulation training.
When to use
Securing Exchange Online mail flow and Microsoft 365 collaboration (Teams, SharePoint, OneDrive). Use this skill for plan/preset decisions, control configuration, drift detection, and SOC operations on email incidents.
Do not use this skill for endpoint protection (defender-for-endpoint), broader
cross-workload investigation (defender-xdr), or SharePoint oversharing before Copilot
rollout (purview-copilot-oversharing).