Microsoft Defender for Office 365
Email security has been the bane of cybersecurity for decades. It remains one of the most common ways for attackers to distribute inbound malware, but the problem goes much deeper than looking for malicious files. Using phishing and business email compromise (BEC) attacks, an email can tick all the boxes in terms of being malware-free, domain name system (DNS) authenticated, and reputation-check clean, but still result in a successful offense.
In Microsoft 365 environments, Exchange Online Protection (EOP) is the default protective gateway and security layer that email must pass. It is available for Exchange Online mailboxes but can support hybrid Exchange environments and can be licensed to on-premises mail servers, even if they are not Exchange Servers. At its core, EOP protects against emails that fail checks against reputation, DNS authentication, malware, spam, phishing, and grey/bulk mail.
With such a long list of the types of threats covered...