Hello from the Moon Team,
This guide shows how Microsoft Defender for Office 365 and Outlook are used in businesses.
Keeping Spam Out of Your Inbox
How Microsoft Defender for Office 365 and Outlook Work Together to Protect You
What Is Microsoft Defender for Office 365?
Microsoft Defender for Office 365 is Microsoft’s built in email security platform. It protects against:
Spam and bulk email
Phishing and spear phishing attacks
Malicious links and attachments
Compromised internal accounts
Unlike third party email gateways, Defender is natively integrated into Microsoft 365 and Outlook, meaning protection applies not just to emails, but also to links inside Word, Excel, PowerPoint, OneDrive, SharePoint, and Teams.
How Spam Is Automatically Handled
Defender continuously scans incoming and outgoing email using Microsoft’s global threat intelligence. Based on what it detects, messages may be:
Delivered normally
Sent to Junk Email
Quarantined
Blocked entirely
What You’ll See in Outlook
Outlook is where users interact with Defender’s decisions. Key things to know:
Junk Email Folder
Spam that is low risk is placed here
Review occasionally in case a legitimate email was misclassified
If an email is safe, right click → Report → Not Junk
Quarantined Emails
Dangerous messages never reach your inbox
IT can review and release messages if appropriate
You may receive quarantine notifications where you can release legitimate emails
Safe Links & Attachments
Links are checked at the time you click, not just when received
If a previously safe link becomes malicious, Defender will block it
Attachments are opened in a secure environment before delivery, if you have defender
What You Should Do as a User
Technology is powerful, but user awareness is critical. Here’s how you can help:
Report Suspicious Emails
Use the Report Phishing or Report Message option in Outlook
This helps improve protection for everyone
Be Cautious with Links
Unexpected emails asking you to “log in”, “confirm”, or “pay” should raise suspicion
Hover over links to check the destination before clicking
Do Not Open Unknown Attachments
Especially ZIP files, HTML attachments, or “urgent” invoices you weren’t expecting
Never Share Passwords or MFA Codes
IT will never ask for them via email
Why This Matters
Many modern attacks start with one convincing email. Even when a message comes from a known sender, their account may have been compromised. Defender for Office 365 is designed to detect these scenarios, but your actions still play a vital role.
By combining:
Automated protection from Microsoft Defender for Office 365
Real time visibility in Outlook
Alert and informed users
Need Help or Have Concerns?
Contact the IT Service Desk
Do not forward the email to colleagues
Do not click links “just to check”
Staying vigilant keeps everyone safer.
