Description:
Reports on the Microsoft Secure Score improvement action Create zero-hour auto purge policies for malware, part of Exchange Online Protection. Microsoft evaluates this control across your tenant's policies and Augmentt surfaces the result alongside your other posture checks.
Why:
Zero-hour auto purge (ZAP) quarantines the message that contains malware attachment for both read, as well as unread, messages that are found to contain malware after delivery. Only admins can view and manage messages that have been quarantined.
Configured: 100% of users are affected by policies that are configured securely
Not Configured: One or more applicable policies are not configured securely.
Scoring: Contributes up to 1 point to the Posture Recommendations score.
Category: Exchange
Microsoft Licensing: M365 Defender
Secure Score Impact: YES — Microsoft Secure Score control mdo_zapmalware.
Remediation in Augmentt: Microsoft Defender portal
Compliance Frameworks:
CISA SCuBA — MS.EXO.10.2-3
NIST CSF 2.0 — RS.MI-02
HIPAA Security Rule — 164.308(a)(5)(ii)(B)
CMMC Level 1 — SI.L1-b.1.xiv
CMMC Level 2 — SI.L2-3.14.4
Microsoft documentation:
_KB status: new — this check is not yet documented in the knowledge base._
_Source: Derived from a Microsoft Secure Score improvement action for Microsoft Defender for Office 365. Check ID mdo_zapmalware (module 50)._
Sourced for this page:
Category — Microsoft Learn — Recommended settings for EOP and Microsoft Defender for Office 365 — email and collaboration protection
Microsoft feature suite — Microsoft Learn — Recommended settings for EOP and Microsoft Defender for Office 365 — listed under "Built-in security features for all cloud mailboxes" (Exchange Online Protection)
Secure Score — This check IS a Microsoft Secure Score improvement action; Augmentt reads it from the Graph secureScoreControlProfiles endpoint.
Draft metadata — apply these as Stonly tags in the console, then delete this block. The Stonly API cannot set tags, so they are recorded here instead.
Tags: posture-check · compliance-audit · Defender for Office 365 · M365 Defender · Secure Score · CISA SCuBA · NIST CSF 2.0 · HIPAA · CMMC Level 1 · CMMC Level 2