Anti-spam inbound - Secure Score recommendations

Template family: Defender
Applies to: Microsoft Defender for Office 365
Where to find it: Secure → Defender → Templates → Augmentt Default

What this template is for

Augmentt default policy based on minimum Microsoft Secure Score recommendations.

What it actually does

Creates a HostedContentFilterPolicy in Microsoft Defender for Office 365 configured as follows.

Setting	Value
`SpamAction`	MoveToJmf
`DownloadLink`	false
`BulkThreshold`	6
`AllowedSenders`	(none)
`BlockedSenders`	(none)
`BulkSpamAction`	MoveToJmf
`SpamZapEnabled`	true
`TestModeAction`	None
`AddXHeaderValue`	(empty)
`PhishSpamAction`	Quarantine
`PhishZapEnabled`	true
`RegionBlockList`	(none)
`BulkQuarantineTag`	DefaultFullAccessPolicy
`LanguageBlockList`	(none)
`SpamQuarantineTag`	DefaultFullAccessPolicy
`MarkAsSpamBulkMail`	On
`ModifySubjectValue`	(empty)
`PhishQuarantineTag`	DefaultFullAccessPolicy
`AllowedSenderDomains`	(none)
`BlockedSenderDomains`	(none)
`RedirectToRecipients`	(none)
`EnableRegionBlockList`	false
`MarkAsSpamFramesInHtml`	Off
`EnableLanguageBlockList`	false
`InlineSafetyTipsEnabled`	true
`MarkAsSpamEmptyMessages`	Off
`MarkAsSpamWebBugsInHtml`	Off
`TestModeBccToRecipients`	(none)
`HighConfidenceSpamAction`	Quarantine
`MarkAsSpamFormTagsInHtml`	Off
`MarkAsSpamNdrBackscatter`	Off
`HighConfidencePhishAction`	Quarantine
`MarkAsSpamEmbedTagsInHtml`	Off
`QuarantineRetentionPeriod`	30
`MarkAsSpamJavaScriptInHtml`	Off
`MarkAsSpamObjectTagsInHtml`	Off
`IncreaseScoreWithImageLinks`	Off
`IncreaseScoreWithNumericIps`	Off
`MarkAsSpamSensitiveWordList`	Off
`MarkAsSpamSpfRecordHardFail`	Off

5 further settings are defined by this template.

Anything not listed keeps the Microsoft default.

This is an Augmentt Default template, shipped with the product and shared across all customers. Deploying it creates a new policy in the customer tenant; edit the deployed policy rather than the template.