Reporting Missed Phishing and Spam to LevelBlue SpiderLabs

This guide explains the process for configuring the Microsoft 365 environment to enable users to report missed phishing and spam emails directly to LevelBlue SpiderLabs using the Microsoft Report button in Outlook. The document outlines the steps necessary to set up an email address and shared mailbox for submissions, configure the email address and button for user submissions, and establish a mail flow rule to ensure that reports are sent to LevelBlue SpiderLabs. The guide emphasizes the importance of this reporting mechanism as a feedback loop that helps improve the performance of MailMarshal detection engines. It also notes that the previous Spam Reporter plug-in provided by Trustwave is no longer supported, making the Microsoft Report button the preferred method for reporting phishing and spam. Detailed instructions are provided for each configuration step to ensure accurate reporting.