It automatically scans the URLs (website addresses) present in the incoming emails or Office documents known as time-of-click verification. ATP Safe Links identifies malicious URLs and shows a warning page to the user.

It ensures that incoming email attachments are not malicious. This feature automatically opens the attachments in a virtual environment without disturbing the real-time environment and removes attachments automatically if it finds any malicious indications

It ensures that only legitimate emails are assigned by filtering and setting in the Security & Compliance Center to differentiate between legitimate and malicious activity. It allows review of the senders spoofing your domain with options for granting permission or blocking them.

It allows setting policies on a single domain, all domains, or specific people based on impersonation detection algorithms and machine learning models. Machine learning models appraise the incoming email to decide whether it is malicious and respond according to the configuration of your ATP policy.