As you may already know, Office 365 Advanced Threat Protection (ATP) helps protecting Exchange Online against any security threats.
That said, configuring a correct ATP protection for Exchange Online can be a little bit challenging.
To help you in this process, Microsoft has released a new PowerShell module to generate an Office 365 Recommended Configuration Analyzer (aka ORCA) for ATP.
This requires to have the Exchange Online PowerShell module installed – available using the Click-Once technology at https://cmdletpswmodule.blob.core.windows.net/exopsmodule/Microsoft.Online.CSE.PSModule.Client.application
Once you have the Exchange Online PowerShell module install, you can then install the PowerShell module for ORCA ATP using the below command
Install-Module –Name ORCA
Once done, launch Exchange Online PowerShell command prompt and login to your tenant using
Connect-EXOPSSession
Once done, run the command to get the ORCA report for your ATP implementation
Get-ORCAReport
This will then connect to your tenant and check best practices implementation for Advanced Threat Protection.
The report will then be saved within your user profile in AppData\Local\Microsoft\ORCA\ folder.
Finally you just have to open this HTML report and review the recommendations.
