语言设置 | Language Settings
默认语言:简体中文 | Default Language: Simplified Chinese

语言切换: 简体中文/繁体中文/英文,登录 >> 用户控制面板 >> 面板偏好 >> 我的语言
To switch between English/Simplified Chinese/Traditional Chinese, Login >> User Control Panel >> Board preference >> My language

Compromised users report

回复
Max
帖子: 4
注册时间: 2021 11月 24 周三, 11:09 am

Compromised users report

帖子 Max » 2021 11月 24 周三, 12:07 pm

Note

This report is available in Microsoft 365 organizations with Exchange Online mailboxes. It's not available in standalone Exchange Online Protection (EOP) organizations.
The Compromised users report shows shows the number of user accounts that were marked as Suspicious or Restricted within the last 7 days. Accounts in either of these states are problematic or even compromised. With frequent use, you can use the report to spot spikes, and even trends, in suspicious or restricted accounts. For more information about compromised users, see Responding to a compromised email account.

图片

The aggregate view shows data for the last 90 days and the detail view shows data for the last 30 days.

To view the report in the Microsoft 365 Defender portal, go to Reports > Email & collaboration > Email & collaboration reports. On the Email & collaboration reports page, find Compromised users and then click View details. To go directly to the report, open https://security.microsoft.com/reports/CompromisedUsers.


On the Compromised users page, the chart shows the following information for the specified date range:
  • Restricted: The user account has been restricted from sending email due to highly suspicious patterns.
  • Suspicious: The user account has sent suspicious email and is at risk of being restricted from sending email.

The details table below the graph shows the following information:
  • Creation time
  • User ID
  • Action

You can filter both the chart and the details table by clicking Filter and selecting one or more of the following values in the flyout that appears:
  • Date (UTC): Start date and End date.
  • Activity: Restricted or Suspicious

When you're finished configuring the filters, click Apply, Cancel, or Clear filters.

On the main report page, the Create schedule icon. 图片 Create schedule, Request report. 图片Request report, and Export. 图片Export buttons are available.


图片



回复

回到 “Spam and Phishing Email Reports”