Forum Discussion
Safe Links - Report on users to have attempted to click on a malicious link
Hi - How can I find out who has clicked on a link that was blocked? There was an obvious spam email doing the rounds, and I'd like to know who has fallen for it? Thanks
Hi ActionR45,
You can use Get-UrlTrace
https://docs.microsoft.com/en-us/powershell/module/exchange/advanced-threat-protection/get-urltrace?view=exchange-ps
As described in the article, this is designed to determine who clicked through to a malicious web site in the past 7 days. To note, it’s currently limited to 7 days
Hope that answers your question!
Best, Chris
You can use Get-UrlTrace
https://docs.microsoft.com/en-us/powershell/module/exchange/advanced-threat-protection/get-urltrace?view=exchange-ps
As described in the article, this is designed to determine who clicked through to a malicious web site in the past 7 days. To note, it’s currently limited to 7 days
Hope that answers your question!
Best, Chris
- Thanks Chris, I’ve run that command, but still not getting the results. There’s some users whom I know got the blocking page, but they didn’t show up?
