Microsoft provides an Advanced Threat Protection (ATP) service that delivers SVSU additional safeguards to our existing email security controls. It is composed of two parts Safe Links and Safe Attachments.
Safe Links looks for malicious URLs. Safe Attachments looks for malicious content in email attachments.
Safe Links
Safe Links rewrites URLs during delivery. The original URL is replaced by a longer URL. Safe Links evaluates the hyperlinks from external email addresses. To find the original website address look for url=https as shown in the Safe URLs example below.
- URLs will be detected in Office apps (i.e. Word, Excel and PowerPoint) when emailed as an attachment.
- Safe Links will not let you visit a bad link.
Safe URLs
If the link is safe, you will be sent to the original Web address when you click on the active link.
Bad URLs
If Microsoft detects a malicious webpage -- you will be directed and see a warning message indicating the Web address you are trying to visit is harmful. See example below.
Normal URLs with hover example
Sometimes a hyperlink will look normal, however, when you hover over it you see the longer URL -- it is still rewritten. 
Safe Attachments
Safe Attachments scans all email attachments and rigorously checks for malicious content. If an attachment is found to be malicious, you will receive .txt attachment explaining that the original attachment was found to be malicious.
- If you are sent an attachment that was malicious you will receive the original message but the attachment will be replaced with a .txt document.
- When you open the .txt document you will be notified that Malware was detected by Safe Attachments.
- If you know the sender of the email, contact them if the attachment is needed and have them remove the malicious content and resend the attachment.