View the reports for Exchange Online Protection

When you want to see how Exchange Online Protection (EOP) is working for your organization, can view your EOP reports in the Security & Compliance Center. (Go to Reports > Dashboard.) EOP reports include information about malware detections, spoof mail, and spam detections.

The Security & Compliance Center dashboard can help you see where Advanced Threat Protection is working

Select one of the following reports.

The report shows incoming and outgoing malware that was detected by EOP for each day.

To view this report, in the Security & Compliance Center, go to Reports > Dashboard > Malware Detections.

To view this report, in the Security & Compliance Center, go to Reports > Dashboard > Malware Detections

When you hover over a day in the chart, you can see how many messages that contained malware came in to (inbound) or went out from (outbound) your organization.

Click (or tap) the report to open it in a new browser window, where you can get a more detailed view of the report.

This report provides detailed information about inbound and outbound malware

Below the chart, you'll see information, such as the sender's email address, recipient's email address, subject line of each message, and the name of the malware (if any) associated with each message.

Select an individual message to view more details about that item.

The report shows the various kinds of malware that was detected by EOP.

To view this report, in the Security & Compliance Center, go to Reports > Dashboard > Top Malware.

SCC - EOP Top Malware

When you hover over a wedge in the pie chart, you can see the name of a kind of malware and how many messages were detected as having that malware.

Click (or tap) the report to open it in a new browser window, where you can get a more detailed view of the report.

This report shows the top malware detected for your organization

Below the chart, you'll see a list of detected malware and how many messages were detected as having that malware.

The report is a pie chart showing your top email senders.

To view this report, in the Security & Compliance Center, go to Reports > Dashboard > Top Senders and Recipients.

To view this report, in the Security & Compliance Center, go to Reports > Dashboard > Top Senders and Recipients

When you hover over a wedge in the pie chart, you can see a count of messages sent or received.

Click (or tap) the report to open it in a new browser window, where you can get a more detailed view of the report.

Use the Show data for list to choose whether to view data for top senders, receivers, spam recipients, and malware recipients. You can also see who received malware that was detected by Advanced Threat Protection.

Use the Show Data For list to view specific information

Below the chart, you'll see who the top email senders or recipients were, along with a count of messages sent or received for the given time period.

The report shows how many spoof mail messages were detected, and of those, which ones were considered "good" (spoof mail done for legitimate business reasons).

To view this report, in the Security & Compliance Center, go to Reports > Dashboard > Spoof Mail.

To view this report, in the Security & Compliance Center, go to Reports > Dashboard > Spoof Mail

When you hover over a day in the chart, you can see how many spoof mail messages came through.

Click (or tap) the report to open it in a new browser window, where you can get a more detailed view of the report.

The report shows all the spam content blocked by EOP.

To view this report, in the Security & Compliance Center, go to Reports > Dashboard > Spam Detections.

To view this report, in the Security & Compliance Center, go to Reports > Dashboard > EOP Spam Detections

When you hover over a day in the chart, you can see how many items were blocked that day, as well as how those items are categorized. For example, you can see how many spam messages were filtered, and how many items came from a blocked Internet Protocol (IP) address.

Click (or tap) the report to open it in a new browser window, where you can get a more detailed view of the report.

The Spam Detections report tells you how many spam messages were blocked or filtered out

Below the chart, you'll see a list of spam items that were detected. Select an item to view additional information, such as whether the spam item was inbound or outbound, its message ID, and its recipient.

The report shows information about incoming and outgoing email, including spam detections, malware, and "good" email.

To view this report, in the Security & Compliance Center, go to Reports > Dashboard > Sent and received email.

To view this report, in the Security & Compliance Center, go to Reports > Dashboard > Sent and received email

When you hover over a day in the chart, you can see how many messages came in, and how those messages are categorized. For example, you can see how many messages were detected as containing malware, and how many were identified as spam.

Click (or tap) the report to open it in a new browser window, where you can get a more detailed view of the report.

You can use the Break down by list to view information by type or by direction (incoming and outgoing).

Use the Break Down By list to view information by type or direction

Below the chart, you'll see a list of email categories, such as GoodMail, SpamContentFiltered, and so on. Select a category to view additional information, such as actions that were taken for malware, and whether email was incoming or outgoing.

This report tells you about anti-malware, anti-spam, and other message detections

If you are not seeing data in your EOP reports, double-check that your EOP policies are set up correctly. For more information, see Anti-spam and anti-malware protection

Related topics

Overview of the Office 365 Security & Compliance Center
View the reports for Advanced Threat Protection
View the reports for data loss prevention
Threat management in the Office 365 Security & Compliance Center
Office 365 Threat Intelligence overview

Connect with an expert
Contact us
Expand your skills
Explore training

Was this information helpful?

Thank you for your feedback!

Thank you for your feedback! It sounds like it might be helpful to connect you to one of our Office support agents.

×