Mailbox intelligence based impersonation protection is enabled in anti-phishing policies.

Why This Matters

Mailbox intelligence impersonation protection uses machine learning to detect and block fraudulent emails that impersonate users or internal domains. Without this feature enabled, your organization is more vulnerable to phishing attacks that trick users into sharing credentials or initiating unauthorized wire transfers. Admins should prioritize this setting because mailbox intelligence significantly reduces the risk of sophisticated impersonation-based threats that traditional spam filters often miss.

What Aether365 Checks

This check verifies that mailbox intelligence based impersonation protection is turned on in your anti-phishing policies. It appears in the Aether365 dashboard under microsoft-365 checks for medium severity.