Kurt Shintaku's Blog

Do you know to recognize and respond to a compromised email account in Office 365? 

• There are over a dozen symptoms to watch & monitor for.  (Many of these can be auto-detected, identified & alerted upon using Azure Identity Protection)
• Additionally, there are 5 steps in investigating any suspicious symptoms or activity around an account. 
• Once identified, there are 7 steps to complete to secure and restore email function to a suspected compromised Office 365 account and mailbox.

Want to know what these steps are?  Read the following recently updated article & it’s accompanying video:

• Responding to a Compromised Email Account in Office 365
  https://docs.microsoft.com/en-us/office365/securitycompliance/responding-to-a-compromised-email-account