Microsoft Defender Integration with the MetaPhish Reporter Button

Integrate the MetaPhish Report a phish button with Microsoft Defender for Office to send reported emails directly to Microsoft’s Submissions page for analysis.


How It Works

  • With this integration enabled, users can report suspicious emails to both your organisation and Microsoft Defender with a single click.

  • In the Microsoft 365 Defender platform, the Submissions page receives and processes emails that users report for further analysis.


Benefits

  1. Enhanced Security Insights: Reported phishing emails are not only flagged within MetaPhish but are also forwarded to Microsoft Defender’s submissions page. This provides administrators with additional intelligence on potential threats and supports deeper investigation.
  2. Streamlined Phishing Reporting: The integration simplifies the reporting workflow. When a user reports a suspicious email via the MetaPhish button, the email is simultaneously sent to Microsoft Defender. This creates a seamless reporting experience and leverages the combined strengths of both platforms without disrupting user productivity.
  3. Improved Risk Management: Reported phishing attempts feed into MetaPhish’s reporting and risk‑scoring tools. Admins gain visibility into who reported the email and how this action influences the user’s individual risk score. This holistic approach strengthens threat awareness and supports more informed security decision‑making.

For setup instructions, refer to the following article: 

Back to all articles