Microsoft Defender for Office 365 Recommended Configuration Analyzer (ORCA) 2.8.0 released

Andres Bohren

2023-12-05

Hi All,

Yesterday a new Version of the “Microsoft Defender for Office 365 Recommended Configuration Analyzer” (ORCA) PowerShell Module has been released.

According to GitHub Milestones the latest Update seems to fix six issues

I am using the new PSResourceGet here instead of the PowerShellGet commands.

Show installed Versions and what’s available in PowerShell Gallery

Get-InstalledPSResource ORCA -Scope AllUsers
Find-PSResource ORCA

Uninstall the old Module and install the newest Version.

Uninstall-PSResource ORCA -Scope AllUsers
Install-PSResource ORCA -Scope AllUsers
Get-InstalledPSResource ORCA -Scope AllUsers

You can run Get-OrcaReport without first connect to ExchangeOnline and Security and Compliance. The Script will automatically promt you to connect.

Connect-ExchangeOnline -ShowBanner:$false
Connect-IPPSSession -ShowBanner:$false
Get-OrcaReport

At the End a HTML Report will be generated. It will show also changes to older Reports

Does not look to bad

Issue is only in the Default Policy

Missing Domain in SafeLinks Policy / Issue only in the Built-in Policy

Save Attachments and SafeLinks are not enabled for every Domain due to Licensing constraints

Again the default Policy

Again the default Policy

Again the default Policy

DKIM is not enabled on the Direct Routing Domain

Again the default Policy

ARC not enabled on subdomain and Direct Routing Domain

New recommendation

Regards
Andres Bohren