0

O365 SafeLinks policy has a setting to disable the per-user clicks of URLs in an email message.

I want to obtain a report of potentially infected desktops where the user clicked on the URL and either had malware installed or was phished for information.

Where can I obtain a report of the per-user clicks for this purpose?

2 Answers 2

1

If tracking URLs is enabled, this information can be found in the Exchange Admin Center by choosing mail flow > URL trace. You can sort the URL Trace report by date range, recipients, and specific URLs.

enter image description here

Source:https://o365ppsecurity.blob.core.windows.net/assets/ATP%20Product%20Guide.pdf

0

You can view the reports in the Advanced Threat Protection Dashboard

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .