All Microsoft 365 organizations with cloud mailboxes get anti-phishing protection as previously described. But Defender for Office 365 includes more features and control to help prevent, detect, and remediate phishing attacks. To create and configure these anti-phishing policies, see Configure anti-phishing policies in Defender for Office 365.
Microsoft 365 uses anti-spam policies (also known as spam filter policies or content filter policies) as part of your organization's overall defense against spam. For more information, see Anti-spam protection. The default anti-spam policy automatically applies to all recipients in the organization.
Admins can learn how to view, create, modify, and remove anti-malware policies for cloud mailboxes.
Admins can learn about anti-malware email protection and anti-malware policies that protect against viruses, spyware, and ransomware in Microsoft 365.
To learn more about security intelligence updates, see Security intelligence updates for Microsoft Defender Antivirus and other Microsoft anti-malware. If you're looking for a list of Microsoft Defender processes, see the spreadsheet provided at Enable access to Microsoft Defender for Endpoint service URLs in the proxy server.
To learn more about anti-malware see Getting started with anti-malware in Microsoft Defender. Tip: Stay up-to-date and install the latest updates on all your devices and apps (especially browsers) to help prevent malware.
In Microsoft Defender, anti-phishing policies are available on the Email & Collaboration > Policies & rules > Threat policies > Anti-phishing page. While a default anti-phishing policy automatically applies to all recipients, you can also create custom policies for specific users, groups, or domains.