Microsoft Defender feature that scans URLs in emails and documents at click time for malicious content.
Safe Links is a Microsoft Defender for Office 365 feature providing time-of-click URL protection. When users click links in emails or documents, Safe Links rewrites the URL to route through Microsoft's scanning infrastructure. The destination is checked against threat intelligence and scanned for malicious content. Safe Links protects against delayed attacks where URLs are clean at delivery but become malicious later. It provides URL click tracking and blocking of known malicious sites.
Why It Matters
The DSC Perspective:
Attackers frequently weaponise URLs after email delivery, bypassing traditional scanning. Safe Links protects against these time-bomb attacks by checking URLs when clicked, not just when delivered.