Microsoft 365 Defender attack simulation coverage reporting affected by Teams resource accounts.

Question

Microsoft 365 Defender attack simulation coverage reporting affected by Teams resource accounts.

Anonymous

I've just switched to using MS 365 Defender attack simulation training, and I'm finding the reporting options to be limited. One problem that I'm experiencing is that the many MS Teams resource accounts we're needing for call center operations (400+) are skewing the numbers in the simulation coverage report. It's showing that 72% of our users have not experienced the simulation. Is there a way to hide these resource accounts from Defender's reporting?

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

1 answer

Answer 1

Hello

I’m Adeyemi and I’d be happy to help you with your question.

Microsoft 365 Defender does not provide a built-in feature to exclude specific accounts, such as Teams resource accounts, from its reporting. This means that these accounts are included in the simulation coverage report by default

However, you might be able to work around this issue by using Power BI or another reporting tool to create custom reports. You can export the data from Microsoft 365 Defender and then import it into Power BI¹. Once the data is in Power BI, you can filter out the Teams resource accounts from the report.

I hope this helps

Give back to the Community. Help the next person who has this issue by indicating if this reply solved your problem. Click Yes or No below

Regards Adeyemi

Share via

Microsoft 365 Defender attack simulation coverage reporting affected by Teams resource accounts.

1 answer