Microsoft Defender for Office 365
Email and collaboration

Attack Simulation Training Faq

In brief

The FAQ now explains that delivery uses each recipient’s mailbox time zone with “not before” logic. Recipients receive simulations at the scheduled local time and never earlier.

What Defender admins need to know

Administrators can more accurately plan and interpret simulation delivery times across regions. No action is required.

Summaries are generated from the documentation change itself.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

Q: How does region aware delivery work?

A: Region aware delivery uses the time zone attribute of the targeted user's mailboxmailbox, with "not before" logic, to determine when to deliver the message. There might be aEach recipient receives the simulation at the scheduled time difference of ± one hourday in the email delivery basedtheir own mailbox time zone, and never before it. If that local time has already passed on the user'slaunch day, the recipient receives the message at the same local time zone.on the following day. Because simulation messages are delivered in throttled batches, delivery completes progressively after the scheduled start and might take longer for large simulations. For example, consider the following scenario:

  • At 7:00 AM in the Pacific time zone (UTC-8), an admin creates and schedules a campaign to start at 9:00 AM on the same day.
  • UserA is in the Eastern time zone (UTC-5).