Advanced Threat Protection
Advanced Threat Protection (ATP) is a new email filtering service that complements Exchange Online Protection (EOP) and provides protection against specific types of advanced threats including phishing and zero day attacks.
ATP delivers the following benefits:
- Safe links. Attackers sometimes try to hide malicious URLs with seemingly safe links that are redirected to unsafe sites by a forwarding service after the message has been received. The safe links feature provides real-time, time-of-click protection by dynamically blocking malicious links.
- Safe attachments. All messages and attachments that do not have a known virus/malware signature are routed to a special hypervisor environment, where a behavior analysis is performed using a variety of machine learning and analysis techniques to detect malicious intent. If no suspicious activity is detected, the message is released for delivery to the mailbox.
- URL tracking. Reporting and message tracing allows you to investigate messages that have been blocked due to an unknown virus or malware, while the URL trace capability allows you to track individual malicious links in the messages that have been clicked.