ORCA.189.2 - Safe Links is not bypassed.
Overview
Microsoft Defender for Office 365 Safe Links can help protect against phishing attacks by providing time-of-click verification of web addresses (URLs) in email messages and Office documents. The protection can be bypassed using mail flow rules which set the X-MS-Exchange-Organization-SkipSafeLinksProcessing header for email messages.
Remediation action
Remove mail flow rules which bypass Safe Links.
Related Links
Test Metadata
| Field | Value |
|---|---|
| Test ID | ORCA.189.2 |
| Severity | High |
| Suite | ORCA |
| Category | EXO |
| PowerShell test | Test-ORCA189_2 |
| Tags | EXO, ORCA, ORCA.189.2 |
Source
- Pester test:
tests/orca/Test-ORCA189_2.Tests.ps1 - PowerShell source:
powershell/public/orca/Test-ORCA189_2.ps1