Skip to content

microsoft-365.md

Latest commit

 

History

History
84 lines (51 loc) · 2.99 KB

microsoft-365.md

File metadata and controls

84 lines (51 loc) · 2.99 KB
Raw

NetQuery for Microsoft 365: DNS and email diagnostics in Teams, Outlook and Copilot

NetQuery lets technical teams run public DNS, email security, IP, SMTP, TLS and DNSSEC diagnostics from Microsoft 365, keeping the investigation close to the conversation where the problem is already being discussed.

Supported Microsoft 365 surfaces

NetQuery can be used from supported experiences including:

  • Microsoft Teams chats;
  • Microsoft Teams channels;
  • Outlook;
  • Microsoft 365 Copilot.

Availability can depend on Microsoft 365 tenant policy and administrator approval.

Install NetQuery

Install NetQuery from Microsoft Marketplace.

For trust and compliance information, see the Microsoft app compliance listing.

Run a lookup

Natural language

Describe the investigation in the same terms you would use with another engineer.

Check the MX records for example.com
Check DMARC for example.com
Check TLS for mail.example.com
Audit example.com's email security posture

Direct input

Paste a domain or IP address and let NetQuery route the request to an appropriate diagnostic workflow.

Command syntax

Use command:value when you already know the lookup you want.

mx:example.com
dmarc:example.com
tls:example.com
smtp:mail.example.com

See lookup and command examples.

Common Microsoft 365 workflows

Troubleshoot mail routing

Check MX configuration and SMTP reachability first, then move into SPF, DKIM, DMARC and TLS. See the email delivery troubleshooting workflow.

Review a domain's email security posture

Use a domain-level request to collect the high-signal checks, then drill into the warning or failure that matters rather than manually opening unrelated tools.

Investigate suspicious infrastructure

Start with the domain or IP, then pivot through DNS, ASN ownership, reverse DNS, certificates and related public signals while keeping the result in the incident conversation.

Validate DNSSEC

Use the DNSSEC chain-of-trust result to identify whether a failure is at the parent DS, child DNSKEY, signature or authenticated-denial layer. See DNS and DNSSEC troubleshooting.

Public infrastructure only

NetQuery queries public DNS and internet-facing services. It does not query private DNS zones or internal-only hosts.

Web reports

Some results include links to NetQuery so you can continue the investigation in a dedicated browser view. Protected reports may require sign-in.

Product links