diff --git a/Checks/check-ORCA220.ps1 b/Checks/check-ORCA220.ps1 index cfb96e6..88d1532 100644 --- a/Checks/check-ORCA220.ps1 +++ b/Checks/check-ORCA220.ps1 @@ -21,8 +21,8 @@ class ORCA220 : ORCACheck $this.Area="Microsoft Defender for Office 365 Policies" $this.Name="Advanced Phishing Threshold Level" $this.PassText="Advanced Phish filter Threshold level is adequate." - $this.FailRecommendation="Set Advanced Phish filter Threshold to 2 or 3" - $this.Importance="The higher the Advanced Phishing Threshold Level, the stricter the mechanisms are that detect phishing attempts against your users, however, too high may be considered too strict." + $this.FailRecommendation="Set Advanced Phish filter Threshold to 3 or 4" + $this.Importance="The higher the Advanced Phishing Threshold Level, the stricter the mechanisms are that detect phishing attempts against your users." $this.ExpandResults=$True $this.ItemName="Antiphishing Policy" $this.DataType="Advanced Phishing Threshold Level" diff --git a/Checks/check-ORCA241.ps1 b/Checks/check-ORCA241.ps1 index 4ca4a14..2daf8e6 100644 --- a/Checks/check-ORCA241.ps1 +++ b/Checks/check-ORCA241.ps1 @@ -15,7 +15,7 @@ class ORCA241 : ORCACheck $this.Area="Microsoft Defender for Office 365 Policies" $this.Name="First Contact Safety Tip" $this.PassText="Anti-phishing policy exists and EnableFirstContactSafetyTips is true" - $this.FailRecommendation="Enable fist contact safety tips to highlight suspicious messages to users." + $this.FailRecommendation="Enable first contact safety tips to highlight suspicious messages to users." $this.Importance="Attackers pretend to be other people in order to trick users. By enabling first contact safety tips, users are shown a visual representation on the email that this is the first time that they have received an email from this sender. This can trigger users in to being suspicious of an email if it they believe it is coming from someone they know." $this.ExpandResults=$True $this.CheckType=[CheckType]::ObjectPropertyValue