Views:
The detection threshold determines how closely a display name must match a high-profile user before triggering an alert. This threshold applies to all high-profile users in your organization.
Note
Note
This setting applies only to suspicious sender detection and BEC detection in Advanced Spam Protection of Advanced Threat Protection policies. Writing style analysis always uses the built-in detection threshold.

Procedure

  1. In Cloud Email and Collaboration Protection, go to Policies → Global Settings → User-Defined Lists → High Profile List and click High Profile Users.
  2. Click Configure detection threshold.
  3. Select one of the following:
    • Use the built-in detection threshold
    • Customize the detection threshold
  4. If you selected Customize the detection threshold, you need to set the threshold level.
    • Aggressive: Detects the most potential threats using fuzzy matching algorithms.
    • Normal: provides balanced detection with moderate accuracy.
    • Conservative: Triggers only for exact matches and character obfuscations.
  5. Click Save.