Distribution group querie

Question

if we modified Defender Phishing setting from 1 to 2 for One Group of Employees (All SSA Exchange) or several groups can track improvements for them specifically these Groups (Distlists) over time?

Answer 1

Hi @JustinMicheal-7973 ,

Do you mean these users are in one or serval groups, and you want to search it by groups?
And what you are concerning is about the phishing messages, if they were sent to the single user, then the filter of group names will not working, am I right?

No way to use Distribution List Groups correct?

Do you mean you want to use the group name and see the result of single users? I think it will not work like this since this will search for messages sent to the group name while not the members of this group.

If I am wrong understanding your questions, please tell me more about it. Thank you for your understanding.

Best regards,
Lou

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.