Get Started With Microsoft Security Attack Simulation Training

Get Started With Microsoft Security Attack Simulation Training

In this video, we look step-by-step at getting started with the Microsoft Security Attack Simulation Training tool. You can use Microsoft Attack Simulation Training to simulate real-world security attacks. You can then find vulnerable users in your organization and give them the security training they need to hopefully spot an actual attack. to use Microsoft Attack Simulation Training, you need one of the following licenses Microsoft 365 E5 or Microsoft Defender for Office 365 Plan 2

⏱️ Timestamps:
0:00​ Intro
0:59 Microsoft Attack Simulation Training prerequisites
1:34 Microsoft Attack Simulation Training Demo
13:00 End-user experience Demo
14:50 Microsoft Attack Simulation Training Admin Reporting
16:25​ Outro

🔔 Subscribe and hit the bell to get notified about my weekly videos

📚 Resources
Get started using Attack simulation training

🔥 Microsoft Security Training Playlist

⚖️ Disclaimer
As full disclosure, I work at Microsoft as a full-time employee.

🏷️ Tags
#security #microsoftsecurity #phishing

[HarryLowtonIT]

Hey all, I hope this video helps you get started with Microsoft Attack Simulation Training capabilities. Looking forward to chatting in the comments.

⏱️ Timestamps:
0:00​ Intro
0:59 Microsoft Attack Simulation Training prerequisites
1:34 Microsoft Attack Simulation Training Demo
13:00 End-user experience Demo
14:50 Microsoft Attack Simulation Training Admin Reporting
16:25​ Outro

[tfiske]

This is a great video. Easy to understand and covers all the good stuff.

[TonyDiazNYC]

thank you for the detailed information

[brianchenn]

Great demo! Thank you for taking the time to share this. Question: Do I need to purchase 1 Defender for Office 365 Plan per user in our org? Or only the admin needs to be licensed?

[simonatutino-fitzgerald]

Great content and demo! Will share with my CISOs

[elnecesario]

Great Video, thank you very much! Highly informative and finally also someone showing, how the phishing email to the end user looks like.

The video even made me laugh a lot. Just play it back at 0.5x speed. No offence, but at that speed it's hilarious :D

[philejackson]

Do only the admins need to have the E5 licensing, or does everyone need to have that licensing that I plan to run the simulation on?

[purelaffs]

Hi Harry,
I absolutely love your videos and I've learnt so much. I hope this comment/feedback is not taken to you by a negative way as it's not my intention but myself and i know others who do not really like videos with the authors video embedded as it's a distraction from looking at the screen.

[ceebarr]

A minor point, but it's worth noting that Microsoft 365 E3, or Microsoft Defender for Office 365 (Plan 2) are the (minimum) licensing requirements to gain access to the Attack Simulator, not necessarily Microsoft 365 E5.

[surajmochi]

Hi Harry,

Thanks for this great video but could you please let me know if we can edit or manipulate the payload in credential harvesting without a license?

[lewispeart]

Do all users (targets of the simulation) require the E5 or plan 2 licensing as well? Or just the Admin?

[TheTeamKeogh]

Hey - is it possible to delete a submitted attack simulation? (I am yet to watch the video in full - so I apologise in advance if I skipped over something).

[Bdunc]

For the "Send a test" option where I can send a test email to myself, I am receiving the payload email and it looks correct, but after clicking it is not taking me to the landing page I created. Is this normal for the test email?

[rochadtr]

Hello, good video thanks.
I already did a campaign for 300 users but in the end nobody clicked to do the training.
Is there a way to run a campaign with just the link to the training?
thank you!

[tolupopoola]

Question please: How do I include the region aware feature if it is missing in my tenant?

[JayPatel-ocrc]

Hey, Does Microsoft 365 Business - Premium offer this feature? Thanks.

[danneshalewis]

This video is great! However, will this still work if we are not using Outlook? When sending the test, I am not receiving the email. We currently use Google for email.

[surajchouhan]

Hello Harry,
Thanks for the demo.

could you or anyone please let me know currently in my organization we have Enterprise Mobility + security E5 & Enterprise Mobility + security E3 and Office 365 E1 for Admin accounts and for users we have Enterprise Mobility + security E5 and office 365 E3, can I use the security attack simulation training from this licenses?, thanks a lot in advance :)

[DonReality]

I'm concerned about where user data is stored or if it's stored after getting phished by using this simulator.
Any information on this? Or do we just assume it discards the information?

[timstruik]

Hi Larry, thank you for sharing this info! One question; when selecting the simulation technique, only the Credential harvest is selectable, the others are greyed out? Is this an admin permission or admin licensing cause? Thanks!