This article will walk you through how to set up alert policies for monitoring deleted groups that may impact your LawToolBox cases. 


Step 1: Set up Alert Policy (see below)

Step 2: Recover deleted group Help: One Flashing Triangle? Restore deleted Microsoft 365 group


Please go to https://security.microsoft.com/ to set up this policy.



Set up an alert policy for deleted groups:

Microsoft 365 Defender Portal > Email & Collaboration > Policies & rules > Alert Policy > New Alert Policy



1. Name your alert policy

Name: Group Deleted Notification

Description: Recover this group if the group email begins with tb. for any LawToolBox matters

Severity: Medium

Category: Information governance


2. Create alert settings:

What do you want an alert on?

Activity is: Deleted group

How do you want the alert to be triggered?

Select: Every time an activity matches the rule


3. Set your recipients:

Select: Opt-in for email notifications

Email recipients: IT@yourdomain.com

Daily notification limit: No limit


4. Review your settings:

Do you want to turn the policy on right away?

Yes, turn on right away



__________________________________________________________


Defender (Expanded):

Set up an alert policy for deleted groups:

Microsoft 365 Defender Portal > Email & Collaboration > Policies & rules > Alert Policy > New Alert Policy


Alert Policy 

+ New Alert Policy


Name your alert policy

Name: Group Deleted Notification

Description: Recover this group if the group email begins with tb. for any LawToolBox matters

Severity: Medium

Category: Information governance



Create alert settings:

What do you want an alert on?

    Activity is: Deleted group

How do you want the alert to be triggered?

    Select: Every time an activity matches the rule



Set your recipients:

Select: Opt-in for email notifications

Email recipients: IT@yourdomain.com

Daily notification limit: No limit


Review your settings:

Do you want to turn the policy on right away?

Yes, turn on right away