Built-in protection: Safe Links time of click protection enabled for email
Analysis / inference: Microsoft has enabled Safe Links time-of-click protection by default for email messages within the Built-in protection preset security policy.
- Dates
- Source and collection dates not recorded
- Source
- Microsoft Defender for Office 365 - What's new · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
The EnableSafeLinksForEmail setting inside the Built-in protection preset security policy is now enabled by default to protect URLs in email messages at the time of click.
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisAutomatic Safe Links time-of-click protection for email messages under the Built-in protection preset security policy changes default tenant posture, altering how user link clicks are evaluated for malicious URLs.
Tenant email links targeted by preset security policies will now undergo mandatory time-of-click evaluation, which may surface new click-time blocks or alter user navigation flows.
Section 03 · Recommended actions
- Review the Built-in protection preset security policy configurations in Microsoft Defender for Office 365.
- Verify that organizational Safe Links custom policies do not conflict with the updated default behavior.
- Review current Safe Links settings and the Built-in protection preset security policy in Microsoft Defender for Office 365.
- Verify the status of the EnableSafeLinksForEmail parameter across tenant protection profiles.