ORCA.105 - Safe Links Synchronous URL detonation is enabled.
Overview
When the 'Wait for URL scanning to complete before delivering the message' option is configured, messages that contain URLs to be scanned will be held until the URLs finish scanning and are confirmed to be safe before the messages are delivered.
Remediation action
Enable Safe Links Synchronous URL detonation.
Related Links
- Microsoft 365 Defender Portal - Safe links
- Recommended settings for EOP and Office 365 Microsoft Defender for Office 365 security
- Set up Microsoft Defender for Office 365 Safe Links policies
Test Metadata
| Field | Value |
|---|---|
| Test ID | ORCA.105 |
| Severity | Medium |
| Suite | ORCA |
| Category | EXO |
| PowerShell test | Test-ORCA105 |
| Tags | EXO, ORCA, ORCA.105 |
Source
- Pester test:
tests/orca/Test-ORCA105.Tests.ps1 - PowerShell source:
powershell/public/orca/Test-ORCA105.ps1