Fabrikam Dental Group
fabrikam.onmicrosoft.com
Each row is an account or setting a check flagged. Findings close on their own once the next collection no longer sees the problem. If something is intentional, accept the risk so it moves out of the totals.
Open findings
163
from 46 checks
Critical or high
31
fix these first
New in 30 days
17
first seen since 12 Sep
Open over 90 days
0
Accepted risks
0
left out of the totals
| Severity | Account or item | Detail | Category | First seen | Action |
|---|---|---|---|---|---|
| high | anna.kowalski@ | Mailbox forwarding to anna.kowalski@ | 7 Sep 2026 |
Accept risk |
|
| high | anna.kowalski@ | Inbox rule "Copy to home" forwards to anna.kowalski.home@ | 7 Sep 2026 |
Accept risk |
|
| high | rhys.hall@fabrikam.example | Mailbox forwarding to rhys.hall@homemail.example (doesn't keep a copy) | 12 Oct 2026 |
Accept risk |
|
| high | rhys.walker@fabrikam.example | Mailbox forwarding to rhys.walker@homemail.example (doesn't keep a copy) | 12 Oct 2026 |
Accept risk |
|
| high | thomas.robinson@ | Inbox rule "Invoices to bookkeeper" forwards to bookkeeping@ | 7 Sep 2026 |
Accept risk |
|
| high | Copy patient letters to archive | Sends mail or copies to records@dentalarchive.example | 7 Sep 2026 |
Accept risk |
|
| high | Default | Allows mail claiming to be from gmail.com, labpartners.example past the spam filter (gmail.com is free mail or the organisation's own) | 7 Sep 2026 |
Accept risk |
|
| high | anna.kowalski@ | ".": Moves to RSS Feeds mail mentioning invoice, payment; Rule name '.' looks deliberately blank | 7 Sep 2026 |
Accept risk |
|
| medium | fabrikam.example | Microsoft 365 DKIM isn't set up (selector2 CNAME missing) | 7 Sep 2026 |
Accept risk |
|
| medium | fabrikam.example | DMARC is monitor-only (p=none); spoofed mail is still delivered | 7 Sep 2026 |
Accept risk |
|
| low | parked.example | Doesn't receive mail but has no DMARC p=reject record | 7 Sep 2026 |
Accept risk |
|
| medium | Default | The common attachments filter is off | 7 Sep 2026 |
Accept risk |
|
| medium | Office365 AntiPhish Default | Ignores what senders' DMARC policies ask for | 7 Sep 2026 |
Accept risk |
|
| low | fabrikam.example | No MTA-STS policy, so mail sent to this domain can be forced onto an unencrypted connection | 7 Sep 2026 |
Accept risk |
|
| low | Organisation | SMTP AUTH is allowed | 7 Sep 2026 |
Accept risk |
|
| low | parked.example | Doesn't receive mail but has no "v=spf1 -all" record to stop spoofing | 7 Sep 2026 |
Accept risk |
|
Accepted risks 0
No accepted risks. When something is intentional, accept the risk from its row above and it moves here with the reason.
Latest collection 12 Oct 2026, 06:36 UTC. Severity, check and first-seen filters, sorting and hidden columns stay in the address, so a saved view or a download shows the same rows.