{"id":7957,"date":"2024-08-31T09:01:57","date_gmt":"2024-08-31T00:01:57","guid":{"rendered":"https:\/\/m365jp.net\/?p=7957"},"modified":"2024-08-31T09:15:43","modified_gmt":"2024-08-31T00:15:43","slug":"mc822720-updated-microsoft-defender-for-office-365-four-override-alerts-retire-in-august-2024","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2024-08-31-mc822720-updated-microsoft-defender-for-office-365-four-override-alerts-retire-in-august-2024","title":{"rendered":"MC822720 | (Updated) Microsoft Defender for Office 365: Four override alerts retire in August 2024"},"content":{"rendered":"
\n
\n
\n\n\n\n
MC822720 | (Updated) Microsoft Defender for Office 365: Four override alerts retire in August 2024<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n
\n\n\n\n\n\n\n\n\n
Classification<\/th>\nplanForChange<\/td>\n<\/tr>\n
Last Updated<\/th>\n08\/30\/2024 23:15:49<\/td>\n<\/tr>\n
Start Time<\/th>\n07\/19\/2024 16:51:20<\/td>\n<\/tr>\n
End Time<\/th>\n10\/31\/2024 07:00:00<\/td>\n<\/tr>\n
Message Content<\/th>\n\n

Updated August 28, 2024: We have updated the rollout timeline and content below. Thank you for your patience.<\/p>\n

Microsoft Defender for Office 365 is retiring four legacy override alerts that are now mostly redundant due to Secure by default<\/a>. With Secure by default, ZAP (zero-hour auto purge)<\/a> blocks high confidence phishing emails by default despite the legacy overrides. The four alerts are: <\/p>\n

    \n
  1. Phish not zapped because ZAP is disabled <\/li>\n
  2. Malware not zapped because ZAP is disabled <\/li>\n
  3. Phish delivered due to ETR override <\/li>\n
  4. Phish delivered due to IP allow<\/li>\n<\/ol>\n

    As part of the deprecation and rollout, <\/p>\n

      \n
    • These policies will no longer be part of the Alert policies in the Microsoft Defender portal. <\/li>\n
    • Existing alerts that are already generated will be in the system (part of Alerts) until data retention applies. <\/li>\n
    • Any features like AIR built on these policies will not function (return no data) but will not result in any crashes or issues to the system. <\/li>\n
    • Any features like Investigations or post-breach functionalities will not have these alerts as part of the selection, filtering, or processing. <\/li>\n<\/ul>\n

      When is the change?
      <\/i><\/p>\n

      We plan to turn off these alerts starting August 18, 2024 and ending September 15, 2024. <\/p>\n

      Who is impacted?<\/i> <\/p>\n

        \n
      1. Phish not zapped because ZAP is disabled: E5\/G5 or Microsoft Defender for Office 365 P2 add-on subscription <\/li>\n
      2. Malware not zapped because ZAP is disabled: E5\/G5 or Defender for Office 365 P2 add-on subscription <\/li>\n
      3. Phish delivered due to ETR override: E1\/F1\/G1, E3\/F3\/G3, or E5\/G5 <\/li>\n
      4. Phish delivered due to IP allow: E1\/F1\/G1, E3\/F3\/G3, or E5\/G5 <\/li>\n<\/ol>\n

        What should I do if I am impacted?<\/i><\/p>\n

        This change will happen automatically by the specified date. No admin action is required. Since these alerts are mostly redundant, we do not expect any impact. Defender XDR Customers using Defender for O365 as a secondary filter (MX record pointed to 3rd party service) and still want the alerts can create a custom detection rule on EmailEvents table with filters on OrgLevelAction & OrgLevelPolicy.<\/p>\n<\/td>\n<\/tr>\n

Machine Translation<\/th>\n\n

2024\u5e748\u670828\u65e5\u66f4\u65b0:\u4ee5\u4e0b\u306e\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u306e\u30bf\u30a4\u30e0\u30e9\u30a4\u30f3\u3068\u5185\u5bb9\u3092\u66f4\u65b0\u3057\u307e\u3057\u305f\u3002\u3054\u7406\u89e3\u3044\u305f\u3060\u304d\u3042\u308a\u304c\u3068\u3046\u3054\u3056\u3044\u307e\u3059\u3002<\/p>\n

Microsoft Defender for Office 365\u306f\u3001 \u65e2\u5b9a\u3067\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4fdd\u8b77<\/a>\u3055\u308c\u3066\u3044\u308b\u305f\u3081\u3001\u307b\u3068\u3093\u3069\u304c\u5197\u9577\u306b\u306a\u3063\u3066\u3044\u308b 4 \u3064\u306e\u30ec\u30ac\u30b7 \u30aa\u30fc\u30d0\u30fc\u30e9\u30a4\u30c9 \u30a2\u30e9\u30fc\u30c8\u3092\u5ec3\u6b62\u3057\u3066\u3044\u307e\u3059\u3002\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u30bb\u30ad\u30e5\u30a2\u3092\u4f7f\u7528\u3059\u308b\u3068\u3001 ZAP(\u30bc\u30ed\u6642\u9593\u81ea\u52d5\u6d88\u53bb)<\/a> \u306f\u3001\u5f93\u6765\u306e\u30aa\u30fc\u30d0\u30fc\u30e9\u30a4\u30c9\u306b\u3082\u304b\u304b\u308f\u3089\u305a\u3001\u4fe1\u983c\u6027\u306e\u9ad8\u3044\u30d5\u30a3\u30c3\u30b7\u30f3\u30b0\u30e1\u30fc\u30eb\u3092\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u30d6\u30ed\u30c3\u30af\u3057\u307e\u3059\u30024 \u3064\u306e\u30a2\u30e9\u30fc\u30c8\u306f\u6b21\u306e\u3068\u304a\u308a\u3067\u3059\u3002<\/p>\n

    \n
  1. ZAP \u304c\u7121\u52b9\u306b\u306a\u3063\u3066\u3044\u308b\u305f\u3081\u3001\u30d5\u30a3\u30c3\u30b7\u30f3\u30b0\u306f Zap \u3055\u308c\u307e\u305b\u3093<\/li>\n
  2. ZAP \u304c\u7121\u52b9\u306b\u306a\u3063\u3066\u3044\u308b\u305f\u3081\u3001\u30de\u30eb\u30a6\u30a7\u30a2\u304c\u30b6\u30c3\u30d4\u30f3\u30b0\u3055\u308c\u306a\u3044<\/li>\n
  3. ETR\u306e\u4e0a\u66f8\u304d\u306b\u3088\u308a\u914d\u4fe1\u3055\u308c\u308b\u30d5\u30a3\u30c3\u30b7\u30f3\u30b0<\/li>\n
  4. IP\u8a31\u53ef\u306b\u3088\u308b\u30d5\u30a3\u30c3\u30b7\u30f3\u30b0\u914d\u4fe1<\/li>\n<\/ol>\n

    \u5ec3\u6b62\u3068\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u306e\u4e00\u74b0\u3068\u3057\u3066\u3001<\/p>\n

      \n
    • \u3053\u308c\u3089\u306e\u30dd\u30ea\u30b7\u30fc\u306f\u3001Microsoft Defender \u30dd\u30fc\u30bf\u30eb\u306e\u30a2\u30e9\u30fc\u30c8 \u30dd\u30ea\u30b7\u30fc\u306e\u4e00\u90e8\u3067\u306f\u306a\u304f\u306a\u308a\u307e\u3059\u3002<\/li>\n
    • \u65e2\u306b\u751f\u6210\u3055\u308c\u3066\u3044\u308b\u65e2\u5b58\u306e\u30a2\u30e9\u30fc\u30c8\u306f\u3001\u30c7\u30fc\u30bf\u4fdd\u6301\u304c\u9069\u7528\u3055\u308c\u308b\u307e\u3067\u30b7\u30b9\u30c6\u30e0 (\u30a2\u30e9\u30fc\u30c8\u306e\u4e00\u90e8) \u306b\u5b58\u5728\u3057\u307e\u3059\u3002<\/li>\n
    • \u3053\u308c\u3089\u306e\u30dd\u30ea\u30b7\u30fc\u306b\u57fa\u3065\u3044\u3066\u69cb\u7bc9\u3055\u308c\u305f AIR \u306e\u3088\u3046\u306a\u6a5f\u80fd\u306f\u6a5f\u80fd\u3057\u307e\u305b\u3093(\u30c7\u30fc\u30bf\u3092\u8fd4\u3057\u307e\u305b\u3093)\u304c\u3001\u30b7\u30b9\u30c6\u30e0\u306b\u30af\u30e9\u30c3\u30b7\u30e5\u3084\u554f\u984c\u3092\u5f15\u304d\u8d77\u3053\u3059\u3053\u3068\u306f\u3042\u308a\u307e\u305b\u3093\u3002<\/li>\n
    • \u8abf\u67fb\u3084\u4fb5\u5bb3\u5f8c\u306e\u6a5f\u80fd\u306a\u3069\u306e\u6a5f\u80fd\u306b\u306f\u3001\u9078\u629e\u3001\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3001\u307e\u305f\u306f\u51e6\u7406\u306e\u4e00\u90e8\u3068\u3057\u3066\u3053\u308c\u3089\u306e\u30a2\u30e9\u30fc\u30c8\u306f\u542b\u307e\u308c\u307e\u305b\u3093\u3002<\/li>\n<\/ul>\n

      \u5909\u66f4\u306f\u3044\u3064\u9803\u3067\u3059\u304b?<\/i><\/p>\n

      \u3053\u308c\u3089\u306e\u30a2\u30e9\u30fc\u30c8\u306f\u30012024 \u5e74 8 \u6708 18 \u65e5\u304b\u3089 2024 \u5e74 9 \u6708 15 \u65e5\u307e\u3067\u30aa\u30d5\u306b\u3059\u308b\u4e88\u5b9a\u3067\u3059\u3002<\/p>\n

      \u5f71\u97ff\u3092\u53d7\u3051\u308b\u306e\u306f\u8ab0\u3067\u3059\u304b?<\/i> <\/p>\n

        \n
      1. ZAP \u304c\u7121\u52b9\u306b\u306a\u3063\u3066\u3044\u308b\u305f\u3081\u3001\u30d5\u30a3\u30c3\u30b7\u30f3\u30b0\u304c zap \u3055\u308c\u306a\u3044: E5\/G5 \u307e\u305f\u306f Microsoft Defender for Office 365 P2 \u30a2\u30c9\u30aa\u30f3 \u30b5\u30d6\u30b9\u30af\u30ea\u30d7\u30b7\u30e7\u30f3<\/li>\n
      2. ZAP \u304c\u7121\u52b9\u306b\u306a\u3063\u3066\u3044\u308b\u305f\u3081\u306b\u30de\u30eb\u30a6\u30a7\u30a2\u304c\u30b6\u30c3\u30d4\u30f3\u30b0\u3055\u308c\u306a\u3044: E5\/G5 \u307e\u305f\u306f Defender for Office 365 P2 \u30a2\u30c9\u30aa\u30f3 \u30b5\u30d6\u30b9\u30af\u30ea\u30d7\u30b7\u30e7\u30f3<\/li>\n
      3. ETR\u306e\u4e0a\u66f8\u304d\u306b\u3088\u308a\u914d\u4fe1\u3055\u308c\u308b\u30d5\u30a3\u30c3\u30b7\u30f3\u30b0:E1\/F1\/G1\u3001E3\/F3\/G3\u3001\u307e\u305f\u306fE5\/G5<\/li>\n
      4. IP\u8a31\u53ef\u306b\u3088\u308a\u914d\u4fe1\u3055\u308c\u308b\u30d5\u30a3\u30c3\u30b7\u30f3\u30b0:E1\/F1\/G1\u3001E3\/F3\/G3\u3001\u307e\u305f\u306fE5\/G5<\/li>\n<\/ol>\n

        \u5f71\u97ff\u3092\u53d7\u3051\u305f\u5834\u5408\u306f\u3069\u3046\u3059\u308c\u3070\u3088\u3044\u3067\u3059\u304b?<\/i><\/p>\n

        \u3053\u306e\u5909\u66f4\u306f\u3001\u6307\u5b9a\u3057\u305f\u65e5\u4ed8\u307e\u3067\u306b\u81ea\u52d5\u7684\u306b\u884c\u308f\u308c\u307e\u3059\u3002\u7ba1\u7406\u8005\u306e\u64cd\u4f5c\u306f\u5fc5\u8981\u3042\u308a\u307e\u305b\u3093\u3002\u3053\u308c\u3089\u306e\u30a2\u30e9\u30fc\u30c8\u306f\u307b\u3068\u3093\u3069\u304c\u5197\u9577\u3067\u3042\u308b\u305f\u3081\u3001\u5f71\u97ff\u306f\u4e88\u60f3\u3055\u308c\u307e\u305b\u3093\u3002Defender XDR \u306e Defender for O365 \u3092\u30bb\u30ab\u30f3\u30c0\u30ea \u30d5\u30a3\u30eb\u30bf\u30fc (MX \u30ec\u30b3\u30fc\u30c9\u304c\u30b5\u30fc\u30c9 \u30d1\u30fc\u30c6\u30a3 \u30b5\u30fc\u30d3\u30b9\u3092\u6307\u3059) \u3068\u3057\u3066\u4f7f\u7528\u3057\u3001\u30a2\u30e9\u30fc\u30c8\u3092\u5f15\u304d\u7d9a\u304d\u5fc5\u8981\u3068\u3057\u3066\u3044\u308b\u304a\u5ba2\u69d8\u306f\u3001OrgLevelAction \u3068 OrgLevelPolicy \u306e\u30d5\u30a3\u30eb\u30bf\u30fc\u3092\u4f7f\u7528\u3057\u3066 EmailEvents \u30c6\u30fc\u30d6\u30eb\u306b\u30ab\u30b9\u30bf\u30e0\u691c\u51fa\u30eb\u30fc\u30eb\u3092\u4f5c\u6210\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

        MC822720 | (Updated) Microsoft Defender for Office 365: Four override alerts retire in August 2024 Classificat […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-7957","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/7957","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=7957"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/7957\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=7957"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=7957"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=7957"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}