Navigate to https://admin.exchange.microsoft.com/ and login with an M365 admin account.
​

In the navigation tree on the left side, head to Mail flow > Rules

Click Add a rule > Create New Rule:
​

Give the rule an appropriate name, and then under Apply this rule if, choose The sender. Then set the condition for The sender to be domain is, and type in the phishing domain name 7 Minute Security will give you. Below is an example where the phishing domain name is domain.com:
​
​

Next, under Do the following, click the drop down menu and choose Modify the message properties, then set the action to set a message header. Set the message header to X-MS-Exchange-Organization-BypassClutter and the value to true:
​

Click the + next to set a message header so that a new condition is created:
​

Under And, click the drop-down and choose Modify the message properties again. Then in the next drop-down, choose set the spam confidence level (SCL) and set it to Bypass spam filtering. Note that even when you choose Bypass spam filtering it is reflected as a value of '-1' when settings are saved (this is totally fine):
​

Click Next near the lower left of this open window.
​

At the next screen, leave all values at their defaults, but make sure you also click Activate this rule on (so that the rule gets enabled) and then click Next:
​

At the next screen, review the rule and then click Finish to enable it.
​

Have 7 Minute Security send a test phishing campaign through to a few designated users. The email should land directly in user inboxes, and not drop into the Junk Email folder.
​
If you don't see the email in the inbox or junk folders, it may have gone into your email quarantine at https://security.microsoft.com/quarantine:
​

If the email shows up in quarantine as pictured above, double-check your mail flow rule and contact 7 Minute Security for further support.