Merge pull request #273 from cammurray/orca2.6

Orca2.6
cammurray · Nov 15, 2023 · 0518eff · 0518eff
2 parents 5314cbc + c43546e
commit 0518eff
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/Checks/check-ORCA220.ps1 b/Checks/check-ORCA220.ps1
@@ -21,8 +21,8 @@ class ORCA220 : ORCACheck
         $this.Area="Microsoft Defender for Office 365 Policies"
         $this.Name="Advanced Phishing Threshold Level"
         $this.PassText="Advanced Phish filter Threshold level is adequate."
-        $this.FailRecommendation="Set Advanced Phish filter Threshold to 2 or 3"
-        $this.Importance="The higher the Advanced Phishing Threshold Level, the stricter the mechanisms are that detect phishing attempts against your users, however, too high may be considered too strict."
+        $this.FailRecommendation="Set Advanced Phish filter Threshold to 3 or 4"
+        $this.Importance="The higher the Advanced Phishing Threshold Level, the stricter the mechanisms are that detect phishing attempts against your users."
         $this.ExpandResults=$True
         $this.ItemName="Antiphishing Policy"
         $this.DataType="Advanced Phishing Threshold Level"

diff --git a/Checks/check-ORCA241.ps1 b/Checks/check-ORCA241.ps1
@@ -15,7 +15,7 @@ class ORCA241 : ORCACheck
         $this.Area="Microsoft Defender for Office 365 Policies"
         $this.Name="First Contact Safety Tip"
         $this.PassText="Anti-phishing policy exists and EnableFirstContactSafetyTips is true"
-        $this.FailRecommendation="Enable fist contact safety tips to highlight suspicious messages to users."
+        $this.FailRecommendation="Enable first contact safety tips to highlight suspicious messages to users."
         $this.Importance="Attackers pretend to be other people in order to trick users. By enabling first contact safety tips, users are shown a visual representation on the email that this is the first time that they have received an email from this sender. This can trigger users in to being suspicious of an email if it they believe it is coming from someone they know."
         $this.ExpandResults=$True
         $this.CheckType=[CheckType]::ObjectPropertyValue