Exchange Online reports

47 reports belong to the Exchange Online area. An API or MCP client sees them when it holds a grant for this area. Kind: a findings list rates each row by severity; a table lists objects. Data: Cached opens at once, On demand reads Microsoft 365 when first opened, Scan runs on request.

Exchange Online › Groups

Report	The question it answers	Kind	Data
All Distribution Lists	Which distribution lists exist, with which primary address and how many direct members?	Table	On demand, PowerShell
All Dynamic Distribution Lists	Which dynamic distribution lists exist, with which primary address and how many members?	Table	On demand, PowerShell
Entra ID Groups Hidden From Address Book	Which Microsoft 365 groups are hidden from the address book?	Table	On demand, PowerShell
Inactive Distribution Groups (last 10 days)	Which distribution groups received no mail in the last 10 days?	Table	On demand, PowerShell

Exchange Online › Mail Security & Hygiene

Report	The question it answers	Kind	Data
Centrally Deployed Outlook Add-ins	Which Outlook add-ins are deployed centrally, to whom, and with which mailbox permissions?	Findings list · dashboard tile	On demand, PowerShell
Direct Send Exposure	Can anyone on the internet deliver unauthenticated mail to the tenant that claims to come from its own domains?	Findings list · dashboard tile	On demand, PowerShell
EWS Retirement Readiness	Is Exchange Web Services still on, and which mailboxes and apps still depend on it before it is switched off?	Findings list · dashboard tile	On demand, PowerShell
Exchange ActiveSync Device Partnerships	Which phones sync mail over Exchange ActiveSync, and which of them Intune does not manage?	Findings list · dashboard tile	Scan, PowerShell
Exchange Admin Role Groups & High-risk Roles	Who holds Exchange admin role groups and high-risk roles such as Mailbox Import Export or Mailbox Search?	Findings list · dashboard tile	On demand, PowerShell
Mail Contacts Hygiene	Which mail contacts are stale, duplicate guests, or point at domains that no longer receive mail?	Findings list · dashboard tile	On demand, PowerShell
Mail Filtering Bypasses	Which allow lists, transport rules and connectors let mail bypass spam and phishing filtering?	Findings list · dashboard tile	On demand, PowerShell
Mailbox Folder Permissions (non-calendar)	Which mailbox folders other than calendars are shared with other users, everyone (Default) or anonymous?	Findings list · dashboard tile	Scan, PowerShell
Mailbox-reading Apps Not Scoped to Specific Mailboxes	Which apps with mailbox application permissions can read every mailbox because Exchange does not scope them?	Findings list · dashboard tile	On demand, PowerShell
MTA-STS, TLS-RPT & SMTP DANE per Domain	Which accepted domains publish MTA-STS, TLS-RPT and DANE, and which leave mail delivery open to downgrade?	Findings list · dashboard tile	On demand, PowerShell
Outlook on the Web Mailbox Policies	Which Outlook on the web policies allow attachment downloads and offline mail on unmanaged computers?	Findings list · dashboard tile	On demand, PowerShell
Priority Accounts & Most-targeted Users	Which users receive the most phishing and malware, and are they tagged and protected as priority accounts?	Findings list · dashboard tile	On demand, PowerShell
Public Folder Exposure	Which public folders accept mail from the internet or are shared with everyone or anonymous users?	Findings list · dashboard tile	Scan, PowerShell
Remote Domain Settings	What may leave the organisation automatically per remote domain - forwarding, out-of-office replies, delivery reports?	Findings list · dashboard tile	On demand, PowerShell
Room & Resource Mailbox Configuration	Which room and resource mailboxes are missing from room lists, lack capacity or location, or do not auto-accept?	Findings list · dashboard tile	On demand, PowerShell
Shared Mailboxes Nobody Can Access	Which shared mailboxes have no active Full Access or Send As holder, or received no mail for 180 days?	Findings list · dashboard tile	Scan, PowerShell
Stuck Mailbox Migrations & Move Requests	Which migration batches and move requests failed, stalled or are waiting to be completed or removed?	Findings list · dashboard tile	On demand, PowerShell
User-reported Phishing Backlog	Which user-reported phishing messages of the last 30 days has nobody reviewed yet?	Findings list · dashboard tile	On demand, PowerShell
Users Restricted from Sending	Which users has Exchange Online blocked from sending, which usually means the account is compromised?	Findings list · dashboard tile	On demand, PowerShell

Exchange Online › Mail Security Posture

Report	The question it answers	Kind	Data
Calendar & External Sharing Policy	Can users share calendar details and contacts with outside domains, and which organisations see free/busy automatically?	Findings list · dashboard tile	On demand, PowerShell
Calendar Folder Permissions	Which mailbox calendars show full details to everyone in the organisation or to anonymous users?	Table · dashboard tile	Scan, PowerShell
Distribution Lists Open to External Senders	Which distribution lists and Microsoft 365 groups accept mail from anyone on the internet, and how many people do they reach?	Table · dashboard tile	On demand, PowerShell
Email Authentication per Domain (SPF / DKIM / DMARC)	Which accepted domains lack SPF, DKIM or an enforced DMARC policy, so mail claiming to come from them can be spoofed?	Table · dashboard tile	On demand, PowerShell
EOP & Defender for Office 365 Posture	Are the Exchange Online Protection and Defender for Office 365 protections switched on, and is automatic forwarding to outside addresses blocked?	Findings list · dashboard tile	On demand, PowerShell
External Sender Tagging	Is mail from outside the organisation tagged as External in Outlook, and which senders are exempt?	Findings list · dashboard tile	On demand, PowerShell
Inactive & Soft-deleted Mailboxes	Which mailboxes of deleted users are still kept (inactive, on hold) and which soft-deleted ones are about to be purged?	Table · dashboard tile	On demand, PowerShell
Journal Rules & Archive Destinations	Which journal rules copy mail to which archive destinations, inside or outside the tenant?	Findings list · dashboard tile	On demand, PowerShell
Legacy Protocols & SMTP AUTH Exposure	Which mailboxes use SMTP AUTH or other legacy protocols, and which have them switched on for no reason?	Table · dashboard tile	On demand, PowerShell
Published Calendars	Which mailbox calendars are published to the internet through a public HTML / ICS link, and with how much detail?	Table · dashboard tile	Scan, PowerShell
Quarantine Backlog & Release Requests (30 days)	What was quarantined in the last 30 days, which releases were requested, and was high-confidence phishing or malware released?	Table · dashboard tile	On demand, PowerShell
Shared Mailboxes Needing a Licence	Which shared mailboxes need an Exchange Online licence they do not have, and which hold one they no longer need?	Table · dashboard tile	On demand, PowerShell
Suspicious Inbox Rules	Which inbox rules delete, hide or forward mail about invoices, payments or passwords, as attackers set up after taking over a mailbox?	Table · dashboard tile	Scan, PowerShell

Exchange Online › Mailboxes

Report	The question it answers	Kind	Data
All Mailboxes	Which mailboxes exist in Exchange Online, of which type, and how large are they?	Table	On demand, PowerShell
Emails With Large Attachments (over 10 MB) - PREVIEW	Which messages in the members’ mailboxes carry attachments over 10 MB, who sent them and to whom?	Table	On demand
Empty Mailboxes	Which mailboxes hold less than about 25 MB?	Table	On demand, PowerShell
Full Mailboxes	Which mailboxes have reached their send quota?	Table	On demand, PowerShell
Unused Mailboxes	Which mailboxes have not received mail for longer than the inactivity threshold?	Table	On demand, PowerShell

Exchange Online › Security

Report	The question it answers	Kind	Data
Delegated Mailbox Access	Who has Full Access, Send As or Send on Behalf rights on which mailbox?	Table	Scan, PowerShell
Exchange Online Transport Rules With External Recipients	Which Exchange Online transport rules redirect, add or copy mail to recipients outside the verified domains?	Table	On demand, PowerShell
External Forwarding Rules On Mailbox Level	Which mailboxes forward mail to an address outside the verified domains?	Table · dashboard tile	On demand, PowerShell
Outlook Rules With External Recipients	Which inbox rules forward or redirect mail to an address outside the tenant’s accepted domains?	Table · dashboard tile	Scan, PowerShell
Shared & Resource Mailboxes With Sign-in Enabled	Which shared, room and equipment mailboxes have an account that can sign in, and was it used recently?	Table · dashboard tile	On demand, PowerShell
Transport Rule & Connector Inventory	Which transport rules and connectors send mail outside the organisation, bypass spam filtering or reroute mail?	Table · dashboard tile	On demand, PowerShell