Mailbox investigation, Simulation delivery, Reporting
Keepnet + Microsoft 365 integration
Find, remove and simulate across Microsoft 365.
Keepnet integrates with Microsoft 365 to find, remove and simulate across Microsoft 365.
What you get
- Search mailboxes for a reported email, then delete or tag it
- Create simulations in mailboxes with Direct Email Creation (DEC)
- The Outlook add-in reads reported emails through Graph
How it works
- Grant application permissions with admin consent
- Keepnet checks API, account, email and category access before it runs
- Investigations, delivery and reporting all use the same connection
Data and permissions
| Data | Direction | Detail |
|---|---|---|
| Mailboxes | Two-way | Search, categorise and delete matching emails |
| Accepted domains | In | Read from your tenant |
| Simulation emails | Out | Created through Graph (DEC) |
What you need
- Microsoft 365 tenant
- Global admin consent
Set up
Connect your tenant in Company settings and run the permission check.
Related integrations
- Works with
- Incident Responder, Phishing Simulator, Phishing Reporter
- Built by
- Keepnet
- Last updated
- October 2026
