Does threat assessment API supports configuration of the following policies? Anti-phishing Anti-spam Anti-malware

No. Those operations are only available via the corresponding Exchange Online PowerShell cmdlets, no Graph API support yet.

Is there any time in mind for this to be of the graph API? This will be REALLY very helpful.

Threat assessment API: Configure policies

Accepted answer

Vasil Michev 106.2K Reputation points MVP

2022-01-30T08:15:19.23+00:00

No. Those operations are only available via the corresponding Exchange Online PowerShell cmdlets, no Graph API support yet.
Please sign in to rate this answer.

1 person found this answer helpful.
Macháček Martin 211 Reputation points

2022-01-31T06:46:35.497+00:00

Could you please share some link which cmdlets should be used?
I've found the following cmdlets:

New malware filter policy
New anti-phish policy
New safe attachment policy
New safe link policy

I'm not sure how to apply some policy to a threat assessment created by Graph API.

Vasil Michev 106.2K Reputation points MVP

2022-01-31T07:35:56.413+00:00

Not sure what you mean by "apply some policy to a threat assessment". Threat assessment requests are basically the equivalent of admin submissions, a way to send a message (file/url) for re-examination by Microsoft. Basically, you use it to get a second opinion on why a given item was (not) marked as spam/malware. Nowhere in the process you need to specify or modify the policies mentioned above. Those are not configurable via the Threat assessment API.

Read more about the admin submissions feature here: https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/admin-submission?view=o365-worldwide

Macháček Martin 211 Reputation points

2022-02-01T11:06:08.897+00:00

I've read about admin submissions feature but I couldn't find any info how to configure admin submissions via Exchange Online PowerShell cmdlets.

If I want to let admin to decide what to do when a user send a report how can I configure via powershell that the report from user won't be send directly to Microsoft but only to a tenant admin in User reported message view?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Threat assessment API: Configure policies

1 additional answer

Your answer