MT.1151 - Email Scanning should be enabled
Overview
Verify that email scanning is enabled for Exchange queues protection.
Disabled email scanning allows malware to enter through Exchange message queues.
Remediation action:
- Open Microsoft Endpoint Manager > Endpoint Security > Antivirus
- Edit the relevant Microsoft Defender Antivirus policy
- Enable Allow Email Scanning
Related links
Test Metadata
| Field | Value |
|---|---|
| Test ID | MT.1151 |
| Severity | High |
| Suite | Maester |
| Category | Defender |
| PowerShell test | Test-MtMdeEmailScanning |
| Tags | Defender, Maester, MT.1151 |
Source
- Pester test:
tests/Maester/Defender/Test-MtMdeAntivirusPolicy.Tests.ps1 - PowerShell source:
powershell/public/maester/defender/Test-MtMdeEmailScanning.ps1