Microsoft 365 2 | Thibault Chatiron

Required Configuration for Phishing Simulation emails

Exchange online protection (EOP)/ Defender for Office 365 (MDO) customers who want to send phishing simulation emails, need to configure advance delivery policy for optimal behavior. This policy will ensure that emails that match your conditions are delivered unfiltered to the Inbox and that safe links time of click protection and post-delivery actions are disabled. …

Outlook web: Replacing “Activity-Based Authentication Timeout” with “Idle Session Timeout for Microsoft 365

The Activity-Based Authentication Timeout for Outlook on the web will be replaced by Idle Session Timeout for Microsoft 365. When this will happen: Microsoft expect to complete by mid-February 2024. How this affects your organization: At the end of 2023, we will be ending support for Activity-Based Authentication Timeout, at that point all organizations who …

Retiring “MDE Settings” and “New version” options from Threat Explorer

Microsoft will be retiring the “MDE Settings” and “New version” options from Threat Explorer as they work to clean up and streamline the user experience. When this will happen: Microsoft expect to complete by late December 2023. How this will affect your organization: Users and Administrators will no longer see the “MDE Settings” and “New …

Microsoft Purview | Data Lifecycle Management and Records Management – Microsoft Graph APIs for extensibility

As a part of the extensibility vision of Microsoft and first release to Microsoft Graph, Microsoft is introducing three new APIs for retention labels, events, and event types in the Microsoft Graph beta environment. These APIs will enable you to customize and extend on what we have built in the product so far. These APIs …

Ability to change retention period on labels set to start retention based on “When items were labeled”

Previously, admins could not change the retention period set on existing labels configured to start retention from when items were labeled. This feature will remove this restriction, and the resulting behavior will be consistent with other retention label types. When this will happen: Rollout will begin in late December 2023 (previously late November) and is …

Exchange auto-labeling supports non-mail enabled security groups

Service side auto-labeling now supports scoping of Exchange auto-labeling to non-mail enabled security groups. When this will happen: Rollout is expected to be complete by late November. How this will affect your organization: Admins can create new or edit existing auto-labeling policies to include new Exchange locations for non-mail enabled security groups. What you need …

Customized Retention Policies: Long-Term Retention

Microsoft is rolling out a new feature to enable customers with Microsoft Purview Audit (Premium) and the 10-Year Retention Add-on to create additional customized retention policies. When this will happen: Rollout to general availability in the worldwide clouds will begin in early December and is expected to be complete by late December. How this will …

Data Loss Prevention- simulation mode for DLP policies

Simulation mode in DLP provides DLP admins with an isolated experience to try a DLP policy, assess its impact, and build confidence in the policy efficacy to eventually reduce the time to policy enforcement. Simulation mode is an enhancement to the existing test mode behavior to help Admins evaluate new policies confidently. When this will …

Microsoft Purview Insider Risk Management: Public preview of browsed to generative AI websites indicator

Coming soon, Microsoft Purview Insider Risk Management will be rolling out the public preview of browsed to generative AI websites indicator. When this will happen: Rollout will begin mid-December and is expected to be complete by early January. How this will affect your organization: With this update, we are adding a new indicator, “browsed to …

Announcing the general availability of new Teams on web for Edge and Chrome

November 17th, Microsoft is announcing the general availability of new Teams on web for Edge and Chrome. How this will benefit your organization: When will this happen: New Teams on web begins rolling out today. How this will affect your organization: What you can do to prepare: Visit the support article or download resources to learn how to get …

SharePoint eSignature electronic signature service

SharePoint eSignature is Microsoft’s first party electronic signature service which allows users to easily request eSignatures on a PDF document via SharePoint online. Signers can easily add their electronic signature. Signed documents are saved securely back to SharePoint. When this will happen: Standard Release: Microsoft will begin rolling out to the US in late November …

Microsoft to stop honoring mail flow rules tracking user reporting

Microsoft will be retiring the mail flow rule which help you track end user reporting. This change is being made to improve the availability and reduce the latency of the submission service so that you can respond to threats (false negatives) more quickly and efficiently. When this will happen: Microsoft will be gradually rolling this …

Microsoft Defender for Office 365: DMARC Policy Handling

In order to better protect our customers from exact domain spoofing attacks and improve deliverability of email, Microsoft is making changes to how we handle DMARC p=reject and p=quarantine. For the enterprise customers, Microsoft is making updates to how DMARC policy-based reject can be handled. This change will help Security Administrators be able to choose …

Microsoft Purview compliance portal: PDF files encrypted with sensitivity label can be searched and eDiscovered

Public preview alert. We have started rolling out support for labeled PDF files in SharePoint Online. SharePoint now supports search, eDiscovery, DLP for sensitivity label encrypted PDFs. The sensitivity column will start showing the label names for newly uploaded PDF files. When this will happen: Preview: This rollout is underway and expected to complete by …

Reminder: Microsoft Defender for Office Empowers End Users to Report Suspicious Messages in Microsoft Teams

The ability for Microsoft Teams users to report internalchats, channels and meeting conversations within Teams as a security risk will be turned ON by default. Security risk messages could include ones that contain phishing or spam or malicious content, such as phishing URL or malware file, spam content. To learn how end users can report, …

Use double-key encryption to protect your most sensitive files and emails in Microsoft 365 Apps

To protect your most sensitive content, users of Microsoft 365 Apps can now use Double Key Encryption (DKE) for files and emails using the built-in labeling client. With DKE, Microsoft stores one key in Microsoft Azure and you hold the other key, ensuring that only you can ever decrypt protected content, under all circumstances. Sensitivity labels configured …

OneDrive Sync Account Detection

In the past Windows Business users could add a consumer account to Windows to use within various apps. Users could use this Consumer account to configure syncing their OneDrive consumer files via the OneDrive sync client. This summer the OneDrive Sync client will start prompting Business users if they’d like to sync their Consumer files …

Update your custom detections to leverage new ActionTypes in DeviceNetworkEvents

On July 18, 2023, Microsoft will be retiring a subset of signatures found in the “NetworkSignaturesInspected” action type of Advanced Hunting. With the recent integration of Zeek providing advanced protocol parsing capabilities, which result in better visibility into full network sessions compared to the raw packet bytes found in the “NetworkSignaturesInspected” action type of Advanced …

Microsoft Teams: Set your Work Hours and Location

Set your work location for the day in Microsoft Teams so your team can learn about your availability for in-office and remote collaboration. When this will happen: Targeted Release and Preview: Microsoft has begun rollout and expect to complete rollout by late May. Standard Release: Microsoft expect to complete rollout by early August. How this …

Deploy new Microsoft Teams with Microsoft 365 apps

Starting in September 2023, Microsoft will begin including new Microsoft Teams as part of the new and existing installations of Microsoft 365 apps for Windows depending on the schedule provided in this post. Currently, users can install the new Teams by using the Try the new Teams toggle switch in classic Teams or having administrators …

M	T	W	T	F	S	S
1	2	3	4	5	6	7
8	9	10	11	12	13	14
15	16	17	18	19	20	21
22	23	24	25	26	27	28
29	30

Cookie	Duration	Description
__gads	1 year 24 days	The __gads cookie, set by Google, is stored under DoubleClick domain and tracks the number of times users see an advert, measures the success of the campaign and calculates its revenue. This cookie can only be read from the domain they are set on and will not track any data while browsing through other sites.
_ga	2 years	The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors.
_gid	1 day	Installed by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website's performance. Some of the data that are collected include the number of visitors, their source, and the pages they visit anonymously.
CONSENT	2 years	YouTube sets this cookie via embedded youtube-videos and registers anonymous statistical data.

Cookie	Duration	Description
ANONCHK	10 minutes	The ANONCHK cookie, set by Bing, is used to store a user's session ID and also verify the clicks from ads on the Bing search engine. The cookie helps in reporting and personalization as well.
IDE	1 year 24 days	Google DoubleClick IDE cookies are used to store information about how the user uses the website to present them with relevant ads and according to the user profile.
MUID	1 year 24 days	Bing sets this cookie to recognize unique web browsers visiting Microsoft sites. This cookie is used for advertising, site analytics, and other operations.
test_cookie	15 minutes	The test_cookie is set by doubleclick.net and is used to determine if the user's browser supports cookies.

Cookie	Duration	Description
_clck	1 year	No description
_clsk	1 day	No description
ApplicationGatewayAffinityCORS	session	No description available.
CLID	1 year	No description
GoogleAdServingTest	session	No description
LiSESSIONID	session	No description available.
LithiumUserInfo	past	No description
LithiumUserSecure	past	No description
LithiumVisitor	1 year	No description available.
original_req_url	past	No description
SM	session	No description available.
SRM_B	1 year 24 days	No description available.

Category: Microsoft 365

Required Configuration for Phishing Simulation emails

Outlook web: Replacing “Activity-Based Authentication Timeout” with “Idle Session Timeout for Microsoft 365

Retiring “MDE Settings” and “New version” options from Threat Explorer

Microsoft Purview | Data Lifecycle Management and Records Management – Microsoft Graph APIs for extensibility

Ability to change retention period on labels set to start retention based on “When items were labeled”

Exchange auto-labeling supports non-mail enabled security groups

Customized Retention Policies: Long-Term Retention

Data Loss Prevention- simulation mode for DLP policies

Microsoft Purview Insider Risk Management: Public preview of browsed to generative AI websites indicator

Announcing the general availability of new Teams on web for Edge and Chrome

SharePoint eSignature electronic signature service

Microsoft to stop honoring mail flow rules tracking user reporting

Microsoft Defender for Office 365: DMARC Policy Handling

Microsoft Purview compliance portal: PDF files encrypted with sensitivity label can be searched and eDiscovered

Reminder: Microsoft Defender for Office Empowers End Users to Report Suspicious Messages in Microsoft Teams

Use double-key encryption to protect your most sensitive files and emails in Microsoft 365 Apps

OneDrive Sync Account Detection

Update your custom detections to leverage new ActionTypes in DeviceNetworkEvents

Microsoft Teams: Set your Work Hours and Location

Deploy new Microsoft Teams with Microsoft 365 apps

Thibault CHÂTIRON

Follow Blog via Email

Recent Posts

Categories

Archives