Real-Time Threat Detection

1. Real-Time Threat Detection

Purpose: Protects against sophisticated threats like zero-day attacks.

Steps to Enable Real-Time Threat Protection

1. Go to the Microsoft 365 Defender Portal:
   https://security.microsoft.com.
2. Navigate to Email & Collaboration > Policies & Rules > Threat Policies.
3. Under Anti-malware policies, configure policies for:
   • Enable Zero-hour Auto Purge (ZAP):
     • This automatically removes malware or phishing messages post-delivery if threats are detected later.
   • Enable real-time scanning for email attachments and links.
4. Enable Safe Attachments and Safe Links (covered in Point 4).
5. Monitor threat activity:
   • Go to Reports > Threat Protection Status to monitor detected threats.