Safe Attachments with Advanced Threat Protection
Safe Attachments is designed to detect malicious attachments before anti-virus signatures are available and to provide better zero-day protection to safeguard your messaging system. All messages and attachments without a known virus/malware signature are routed to a special hypervisor environment, where a behavioural analysis is performed using a variety of machine-learning and analysis techniques to detect malicious intent. Safe Attachments then detonates attachments that are common carriers of malicious content, such as Office documents, PDFs, executable (EXE) files, and Flash files. If no suspicious activity is detected, the attachment is released for delivery to the mailbox.
Safe Link is a feature that helps prevent users from going to malicious websites when they click them in email. Attackers sometimes try to hide malicious URLs within seemingly safe links, redirecting users to unsafe sites through a forwarding service after the message has been received. The ATP Safe Links feature proactively protects your users if they click such a link. That protection remains every time they click the link, so malicious links are dynamically blocked while good links remain accessible.