An anti-phishing option in Defender for Office 365 that builds a picture of who each user normally corresponds with, so genuine senders can be told apart from impersonators. It is enabled by default but does nothing until intelligence for impersonation protection is switched on as well.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Mailbox intelligence in context, with comparison tables and the common traps.
Terms in this definition
- Microsoft 365
Formerly Office 365, Microsoft's software-as-a-service productivity suite. A Microsoft Entra tenant provides its identity, and its data is not governed by Azure RBAC.
- Chat message roles
Labels on chat messages: instructions go under system, the person's input under user, the model's previous answers under assistant, and results returned by a called tool under tool (or function).
- Impersonation protection
Guards against senders posing as known people or domains using lookalikes, and draws on mailbox intelligence. Part of anti-phishing in Defender for Office 365, it isn't enabled in the default policy.
Related terms
- Impersonation
Fraudulent mail that mimics a genuine person or company's address or domain. Defender for Office 365 is what supplies the countermeasures: user protection, domain protection, mailbox intelligence and in-message safety tips.