Expanding User reporting in Teams to Defender for Office 365 Plan 1
Analysis / inference: Microsoft Defender for Office 365 Plan 1 now supports user reporting of suspicious Teams messages from chats and channels.
- Dates
- Source and collection dates not recorded
- Source
- Microsoft Defender for Office 365 - What's new · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
Microsoft added support for users to report external and intra-organization Microsoft Teams messages from chats, meetings, and channels directly as security risks or to designated reporting mailboxes for Defender for Office 365 Plan 1 customers.
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisExtending Teams reporting capabilities to Defender for Office 365 Plan 1 broadens visibility into user-reported suspicious messages across standard, shared, and private channels without requiring Plan 2.
Enables security operations to receive and analyze user-submitted Teams message reports within environments licensed for Defender for Office 365 Plan 1.
Section 03 · Recommended actions
- Configure or verify user reporting settings in Microsoft Teams and Defender for Office 365.
- Ensure security operations teams are aware of incoming user-reported Teams messages.
- Review current user reporting settings for Microsoft Teams messages in chats and channels.
- Verify whether your organization is licensed for Microsoft Defender for Office 365 Plan 1.