--- title: Defender for Email Attack Simulation Launch Action description: This guide will show an administrator how to create an attack simulation campaign that will leverage Microsoft created content and have it deployed to internal users immediately. --- [Skip to content](https://knowledge.sittadel.com/defender-for-email-attack-simulation-launch-action#main-content) [![Sittadel-Logo-Icon-Slim-Large-Square-Green-Transparent copy](https://knowledge.sittadel.com/hs-fs/hubfs/Sittadel-Logo-Icon-Slim-Large-Square-Green-Transparent%20copy.png?width=55&height=55&name=Sittadel-Logo-Icon-Slim-Large-Square-Green-Transparent%20copy.png)](https://sittadel.com/) - [About Sittadel](https://sittadel.com/about/) - [Capabilities](https://sittadel.com/capabilities/microsoft-office365-azure-security/) Show submenu for Capabilities - [Microsoft Security Architecture](https://sittadel.com/capabilities/microsoft-office365-azure-security/) - [Detection & Response](https://sittadel.com/capabilities/managed-detection-and-response/) - [Employee Training](https://sittadel.com/capabilities/security-awareness-training/) - [Security Risk Advisors](https://sittadel.com/capabilities/virtual-information-security-officer/) - [Resources](https://sittadel.com/resources/) - [Knowledge Base](https://knowledge.sittadel.com/) Open main navigation Close main navigation - [About Sittadel](https://sittadel.com/about/) - [Capabilities](https://sittadel.com/capabilities/microsoft-office365-azure-security/) Show submenu for Capabilities - [Microsoft Security Architecture](https://sittadel.com/capabilities/microsoft-office365-azure-security/) - [Detection & Response](https://sittadel.com/capabilities/managed-detection-and-response/) - [Employee Training](https://sittadel.com/capabilities/security-awareness-training/) - [Security Risk Advisors](https://sittadel.com/capabilities/virtual-information-security-officer/) - [Resources](https://sittadel.com/resources/) - [Knowledge Base](https://knowledge.sittadel.com/) - [Get Sittadel](https://sittadel.com/start/) [Get Sittadel](https://sittadel.com/start/) Find answers to your security questions. - There are no suggestions because the search field is empty. 1. [Sittadel Knowledge Base](https://knowledge.sittadel.com/?hsLang=en) 2. [Azure Portals](https://knowledge.sittadel.com/azure-portals?hsLang=en) 3. [Defender](https://knowledge.sittadel.com/azure-portals?hsLang=en#defender) # Defender for Email Attack Simulation Launch Action ## This guide will show an administrator how to create an attack simulation campaign that will leverage Microsoft created content and have it deployed to internal users immediately. ### **![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Jan-19-2024-04-04-16-2156-PM.png?width=125&height=133&name=image-png-Jan-19-2024-04-04-16-2156-PM.png)Role Requirements** Procedure Scope: **Administrators** Required Group Membership: **Admin.Security** **![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Jan-19-2024-04-29-09-3760-PM.png?width=670&height=5&name=image-png-Jan-19-2024-04-29-09-3760-PM.png)** **Security Awareness Simulation Launch Action** 1. Navigate to the [Attack Simulations Training – Microsoft Defender](https://security.microsoft.com/attacksimulator?viewid=simulations) portal, locate and select the **Launch a simulation** action. ![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Nov-30-2024-03-53-47-1182-PM.png?width=670&height=356&name=image-png-Nov-30-2024-03-53-47-1182-PM.png) 2. Select one of the listed techniques depending on the type of campaign you wish to utilize. Select **Next** to continue. ![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Nov-30-2024-03-57-11-3748-PM.png?width=670&height=356&name=image-png-Nov-30-2024-03-57-11-3748-PM.png) 3. You will supply basic identification information such as the **Name** and **Description** for the simulation. Select **Next** to proceed. ![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Nov-30-2024-03-59-17-2747-PM.png?width=670&height=355&name=image-png-Nov-30-2024-03-59-17-2747-PM.png) 4. Select a preconfigured payload / login page to utilize in your campaign or create your own. Select **Next** when complete. ![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Nov-30-2024-03-59-26-7361-PM.png?width=670&height=356&name=image-png-Nov-30-2024-03-59-26-7361-PM.png) 5. You will be able to configure **Group Assignments** for the simulation, this section will outline the selected groups that will be in scope to receive the simulation. Select **Next** to proceed. ![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Nov-30-2024-04-02-07-6855-PM.png?width=670&height=355&name=image-png-Nov-30-2024-04-02-07-6855-PM.png) 6. You will be able to configure **Exclusion** for the simulation, if applicable. Select **Next** to continue. ![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Nov-30-2024-04-02-15-4276-PM.png?width=670&height=356&name=image-png-Nov-30-2024-04-02-15-4276-PM.png) 7. Select a training method that will aid users that fell victim to the campaign, assignment date can also be established. Select **Next** to continue. ![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Nov-30-2024-04-02-24-5910-PM.png?width=670&height=356&name=image-png-Nov-30-2024-04-02-24-5910-PM.png) 8. Select a landing page that will be displayed to users that fall victim to the campaign. Select **Next** to continue. ![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Nov-30-2024-04-05-40-6365-PM.png?width=670&height=356&name=image-png-Nov-30-2024-04-05-40-6365-PM.png) 9. Select Notification types that will be sent to users. Select **Next** to continue. ![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Nov-30-2024-04-07-08-0660-PM.png?width=670&height=355&name=image-png-Nov-30-2024-04-07-08-0660-PM.png) 10. You will be able to decide a launch date for the campaign you’ve created, for the purpose of this article we will specify upon finalization. Set the duration for the campaign to end for your desired timeframe. Select **Next** to proceed to revision. ![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Nov-30-2024-04-10-16-1917-PM.png?width=670&height=356&name=image-png-Nov-30-2024-04-10-16-1917-PM.png) 11. The review page will allow you to see all configured settings for the simulation, if you detect a discrepancy at this stage make note of the section and select **Back** to go to the previous sections to make the necessary alterations before finalization. If everything checks out, select **Submit** to publish the simulation. ![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Nov-30-2024-04-10-26-0720-PM.png?width=670&height=356&name=image-png-Nov-30-2024-04-10-26-0720-PM.png) 12. A final prompt will notify you of successful creation, select **Done** to finalize the simulation creation. ![](https://knowledge.sittadel.com/hs-fs/hubfs/image-png-Nov-30-2024-04-10-32-1568-PM.png?width=670&height=356&name=image-png-Nov-30-2024-04-10-32-1568-PM.png) ### Need Assistance? Reach out to your Customer Success Manager to discuss how a Sittadel cybersecurity analyst can assist in managing these tasks for you. New to our services? [Inquire](https://sittadel.com/start/) about arranging a consultation to explore optimizing your Azure environment for painless management. - [UserOps](https://knowledge.sittadel.com/userops?hsLang=en#main-content) - [Access & Permissions](https://knowledge.sittadel.com/userops?hsLang=en#access-permissions) - [Account](https://knowledge.sittadel.com/userops?hsLang=en#account) - [Devices](https://knowledge.sittadel.com/userops?hsLang=en#devices) - [Document Sharing](https://knowledge.sittadel.com/userops?hsLang=en#document-sharing) - [Email](https://knowledge.sittadel.com/userops?hsLang=en#email) - [Requests](https://knowledge.sittadel.com/userops?hsLang=en#requests) - [Troubleshoot](https://knowledge.sittadel.com/userops?hsLang=en#troubleshoot) - [TechOps](https://knowledge.sittadel.com/techops?hsLang=en#main-content) - [Tenant Foundations](https://knowledge.sittadel.com/techops?hsLang=en#tenant-foundations) - [Collaboration Security](https://knowledge.sittadel.com/techops?hsLang=en#collaboration-security) - [Email Security](https://knowledge.sittadel.com/techops?hsLang=en#email-security) - [Device Security](https://knowledge.sittadel.com/techops?hsLang=en#device-security) - [Identity Security](https://knowledge.sittadel.com/techops?hsLang=en#identity-security) - [SecOps](https://knowledge.sittadel.com/secops?hsLang=en#main-content) - [Email SOC](https://knowledge.sittadel.com/secops?hsLang=en#email-soc) - [Identity SOC](https://knowledge.sittadel.com/secops?hsLang=en#identity-soc) - [Tenant SOC](https://knowledge.sittadel.com/secops?hsLang=en#tenant-soc) - [Device SOC](https://knowledge.sittadel.com/secops?hsLang=en#device-soc) - [Deploy Intune](https://knowledge.sittadel.com/deploy-intune?hsLang=en) - [Deploy MDE](https://knowledge.sittadel.com/deploy-mde?hsLang=en#main-content) - [Overview](https://knowledge.sittadel.com/deploy-mde?hsLang=en#overview) - [Intune Deployment](https://knowledge.sittadel.com/deploy-mde?hsLang=en#intune-deployment) - [Hands-On Deployment](https://knowledge.sittadel.com/deploy-mde?hsLang=en#hands-on-deployment) - [Azure Arc Deployment](https://knowledge.sittadel.com/deploy-mde?hsLang=en#azure-arc-deployment) - [RMM Tool Deployment](https://knowledge.sittadel.com/deploy-mde?hsLang=en#rmm-tool-deployment) - [MECM/SCCM Deployment](https://knowledge.sittadel.com/deploy-mde?hsLang=en#mecm-sccm-deployment) - [GPO Deployment](https://knowledge.sittadel.com/deploy-mde?hsLang=en#gpo-deployment) - [Deploy Services](https://knowledge.sittadel.com/deploy-services?hsLang=en#main-content) - [Cloud Enclave](https://knowledge.sittadel.com/deploy-services?hsLang=en#cloud-enclave) - [Azure Portals](https://knowledge.sittadel.com/azure-portals?hsLang=en#main-content) - [Entra ID](https://knowledge.sittadel.com/azure-portals?hsLang=en#entra-id) - [Intune](https://knowledge.sittadel.com/azure-portals?hsLang=en#intune) - [Defender](https://knowledge.sittadel.com/azure-portals?hsLang=en#defender) - [Purview](https://knowledge.sittadel.com/azure-portals?hsLang=en#purview) - [SharePoint Admin Center](https://knowledge.sittadel.com/azure-portals?hsLang=en#sharepoint-admin-center) - [Teams Admin Center](https://knowledge.sittadel.com/azure-portals?hsLang=en#teams-admin-center) - [Admin Center](https://knowledge.sittadel.com/azure-portals?hsLang=en#admin-center) - [Exchange Admin Center](https://knowledge.sittadel.com/azure-portals?hsLang=en#exchange-admin-center) [![](https://knowledge.sittadel.com/hs-fs/hubfs/Sittadel_LogoH_Color_BlackText.png?width=186&height=55&name=Sittadel_LogoH_Color_BlackText.png)](https://Sittadel.com) Security for Humans. Copyright © 2026, Sittadel