How to Strengthen M365 Exchange Online Configurations with Kevin Klingbile

SummaryWhen was the last time you reviewed the security of your mail flow rules? Join instructor Kevin Klingbile to learn how attackers exploit weak mail flow rules and how to stop them. Kevin will teach you through real-world examples of rule bypasses, show you how to spot risky configurations, and teach practical steps to secure your email environment. In this free one-hour Antisyphon Anti-cast, you'll strengthen your defenses and make sure your mail flow rules aren’t the next easy target.🛝 Webcast Slides:https://www.antisyphontraining.com/wp-content/uploads/2026/02/strengthen-m365-configs-kevin-klingbile.pdf✏️ Antisyphon Training with Kevin:https://www.antisyphontraining.com/product/defending-m365-azure-with-kevin-klingbile/Chapters(00:00) - Intro – How to Strengthen M365 Exchange Online Configurations with Kevin Klingbile (01:01) - Excahnge Online (03:36) - Exchange Mail Flow Rules (04:09) - Rule Requirements - Conditions (08:25) - Rule Settings (12:04) - Rule Flow (18:23) - Creating “Good” Rules (25:11) - Rule Example - Conditions vs Description (28:18) - Rule Function - Message Sent to Organization (29:28) - Reply to email chain and... (30:45) - Microsoft’s Solution! (Sort of) (31:59) - Mail Rule vs Disclaimer (32:09) - Modify Original Rule (32:52) - New message “Bypassing” Subject Rule (34:52) - Common Rule Issues (41:33) - Phishing Products (42:28) - X-Header Bypass Examples (42:42) - X-Header Example - 2 (43:35) - Direct Send (45:39) - Direct Send - Transport Rules (46:41) - Disable Direct Send** (47:47) - DMARC (48:15) - Securing Exchange Online (48:48) - Q&A Start (57:35) - Other Antisyphon Events (01:05:24) - Final Thoughts Creators & Guests Zach Hill - Host Meagan Bentley - Producer CJ Cox - Guest Kevin Klingbile - Guest Chat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhisin the #🔴live-chat channelClick here to watch a video of this episode. 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.comAntisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.comClick here to view the episode transcript.