1️⃣ Create a new contact
Create a new contact linked to the designated phishing report email address. To do this, go to the Microsoft admin panel and create a new contact.
Name your new contact and fill in the email address field with the address provided to you.
This address is available in the “Inbox” module settings.
Check the box to hide it from the global address list, then click Add.
2️⃣ Create a distribution group
This will allow forwarding to the Riot Inbox:
2. Set the name and description:
3. Assign yourself as the group owner.
4. Add the previously created contact Riot Threats Report as a member of the group.
5. Choose an email address for the group and check the box below.
3️⃣ Configure Outlook to use the new distribution group
Open Settings > Email & Collaboration > User-reported settings in Microsoft Defender.
Scroll down and select Microsoft and my reporting mailbox.
Paste the distribution group address we created above.
