MS Defender Automated Simulation Training: How to have new users to live attack simulation training

Kieran Heneghan 20 Reputation points
2024-11-14T11:55:31.67+00:00

Hi

I am trying to setup MS Defender attack simulation training for staff. I have a number of queries regarding setup.

1: We have a live training campaign which we require all new staff members to complete. Please outline the process of having a new user auto enrolled on to a live training campaign, I cannot see an option for this in the Admin panel.

2: Users are re-directed to the defender portal to engage with training material, this interface contains links to resources within defender which can confuse users, have we as Admins any control over the interface?

Regards

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,433 questions
{count} votes

Accepted answer
  1. Bhasker Donthu 845 Reputation points Microsoft Vendor
    2024-11-15T17:57:31.3233333+00:00

    Hello @Kieran Heneghan,

    Thank you for posting your query on Microsoft Q&A.

    1.Auto-Enrolling New Users in a Live Training Campaign Currently, Microsoft Defender for Office 365 does not provide a direct feature for automatically enrolling new users into an already live training campaign. However, this can be managed using Dynamic Azure AD Groups or manually adding users,

    • Manual Enrollment: You can add new users manually to your live campaign:

    1.Navigate to the Microsoft Defender portal: Go to security.microsoft.com.

    2.Go to Attack Simulation Training: Select Email & collaboration > Attack simulation training.

    3.Select the Campaign: Find your live training campaign and select it.

    4.Add Users: Use the option to add users to the campaign. You can select users individually or upload a list of users.

    For more details please refer link: https://learn.microsoft.com/en-us/defender-office-365/attack-simulation-training-get-started

    • Dynamic Azure AD Groups: To automate the process for future users, create a dynamic group in Azure AD that targets new users and link it to your training campaign. This ensures new staff members are automatically included.
    1. Customizing the Defender Portal Interface Unfortunately, the customization options within the Microsoft Defender portal are limited, and there is no built-in feature to hide or remove links to other Defender resources. The portal is designed to provide comprehensive security information, which includes various links that may not be relevant for training. For more information on the interface and the Defender portal, you can refer to Microsoft Defender for Office 365 Documentation.

    However, you can provide guidance to your users to help them navigate the portal more effectively. Creating a user guide or a quick reference document that highlights the key areas they need to focus on for their training can be very helpful.

     

    I hope this information is helpful. Please feel free to reach out if you have any further questions.
    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.