ORCA.105 - Safe Links Synchronous URL detonation is enabled.

Contributed by Michael Soule with 4 co-contributorsAll contributors →

Overview

When the 'Wait for URL scanning to complete before delivering the message' option is configured, messages that contain URLs to be scanned will be held until the URLs finish scanning and are confirmed to be safe before the messages are delivered.

Remediation action

Enable Safe Links Synchronous URL detonation.

Related Links

• Microsoft 365 Defender Portal - Safe links
• Recommended settings for EOP and Office 365 Microsoft Defender for Office 365 security
• Set up Microsoft Defender for Office 365 Safe Links policies

Test Metadata

Field	Value
Test ID	ORCA.105
Severity	Medium
Suite	ORCA
Category	EXO
PowerShell test	Test-ORCA105
Tags	EXO, ORCA, ORCA.105

Source

• Pester test: tests/orca/Test-ORCA105.Tests.ps1
• PowerShell source: powershell/public/orca/Test-ORCA105.ps1