G DATA Phishing Simulation

Open the Microsoft 365 Admin Center.

In the left-side menu, click Security.

In the left-side menu, click Exchange message trace. You will then be taken to the Exchange Admin Center.

In the left-side menu, click Mail flow and then, in the submenu that opens, click Rules.

Click Add a rule. In the submenu that opens, select Create a new rule.
A new pane opens on the right-hand side of the screen. Give the rule a name, for example, "G DATA PhishingSIM WhitelistDomains".

Under Apply this rule if, select The sender in combination with IP address is in any of these ranges or exactly matches.

Enter one of the IP addresses used by our campaign and click Add. Repeat the process until all required domains have been added. Finally, click Save.

In the drop-down menu "Do the following", select Modify the message properties.
In the next drop-down menu, select Set the spam confidence level (SCL) as the change.
Another pane opens on the right-hand side of the screen.

In the drop-down menu, select "Bypass spam filtering" and click Save.

Click Next.

In the next window, make sure that Rule mode is set to "Enforce" and select a Severity for this rule. Rule matches are grouped in activity reports by Severity. Severity is only a filter to make the reports easier to use. Severity has no Impact on the priority in which the rule is processed. The Severity levels are:

Click Next.

In the next window, review the settings again and click Finish.

Your rule is then available in your rule list. However, it is still disabled. Click Disabled, and a new pane opens on the right-hand side of the screen.

Set the status slider to Enabled.