Forum Discussion
Solved
SafeLinks results in Microsoft 365 Defender incidents
Hello, in Microsoft 365 Defender we receive an incident "Initial access incident on one endpoint reported by multiple sources" with alerts about ZAP'd emails and a "Suspicious URL clicked" alert gen...
- Within security.microsoft.com go to Explorer under Email & Collaboration. From here pop in the sender and go to the Top Clicks tab, this will show if it was blocked or allowed.
Within security.microsoft.com go to Explorer under Email & Collaboration. From here pop in the sender and go to the Top Clicks tab, this will show if it was blocked or allowed.