Ensure Zero-hour auto purge for Microsoft Teams is on
Why This Matters
Without zero-hour auto purge (ZAP) enabled for Microsoft Teams, users remain exposed to zero-day malware and weaponized content that arrives in chats after initial delivery. Malicious messages can bypass traditional filters and sit undetected in conversations for up to 48 hours. Enabling ZAP gives administrators automated retroactive protection that continuously scans and removes dangerous content even after it reaches recipients.
What Aether365 Checks
Aether365 verifies that the Zero-hour auto purge (ZAP) setting for Microsoft Teams protection is enabled in your Microsoft Defender for Office 365 configuration. This check appears in your Aether365 dashboard under the Microsoft 365 security checks section and confirms compliance with CIS benchmark control 2.4.4.