locked
Is there any files or URLs for testing ATP "Safe attachment" and "Safe link"? RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    1
    Sign in to vote

    Hello,

    I'm looking for sample files and sample URLs which are to be detected by ATP filtering.
    Where can we get any sample objects for testing?

    Thank you in advance.
    Saki

    Wednesday, October 5, 2016 2:39 AM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    You can use the EICAR test as detailed here: https://technet.microsoft.com/en-us/library/jj200745(v=exchg.150).aspx

    There are some other similar tests, do a search on your favourite search engine.

    Wednesday, October 5, 2016 6:52 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Vasil,

    Thank you for your comment.

    It is true that we can use EICAR test for testing malware filter, but I'd like to test ATP feature.
    Using EICAR test file, it is blocked by malware filter before it reaches "Safe attachment" filter, unfortunately.

    I suppose that any appropriate test file is required since ATP is for zero-day attack, not for known malwares.

    Saki

    Wednesday, October 5, 2016 8:14 AM
  • Question
    Sign in to vote
    1
    Sign in to vote

    Hi,

    Sorry, I have found no official test attachment and link for ATP.

    But I also have found the following articles which tested the bad attachment and link for your reference:

    http://www.conquest247.com/advanced-threat-protection-in-exchange-online-protection/

    http://c7solutions.com/2015/06/getting-started-with-office-365-advanced-threat-protection

    Please note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

    Hope it's helpful to you.

    Regards,

    David Wang
    TechNet Community Support


    Please remember to mark the replies as an answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.



    • Edited by David Wang_ Thursday, October 6, 2016 4:20 AM
    • Proposed as answer by David Wang_ Monday, October 10, 2016 9:57 AM
    Thursday, October 6, 2016 3:20 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi David,

    Thank you for your comment.

    Your links help me to ask their authors to share bad attachments and URLs.
    I will wait for his reply on his blog for now.

    Thanks,

    Saki

    Thursday, October 6, 2016 11:05 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    

    Hi,

    How about the issue? Are above replies helpful to you?

    If the issue is resolved, please mark some helpful replies as answers, that will encourage people to take time out to help you. 

    Thanks,

    David Wang
    TechNet Community Support


    Please remember to mark the replies as an answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, October 10, 2016 9:57 AM
  • Question
    Sign in to vote
    2
    Sign in to vote

    There are actually test values you can use.

    See here for detail: 

    https://technet.microsoft.com/en-us/library/mt490479.aspx

    Mike Crowley | MVP
    My Blog -- Baseline Technologies

    • Proposed as answer by Mike Crowley Tuesday, October 25, 2016 1:29 AM
    Tuesday, October 25, 2016 1:29 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    The built in reporting for Office 365 Safe Attachment delays is non-existent. Fortunately we were able to put together a script which could get the data from Exchange Online and then visualize it through Power BI.

    Feel free to take a look and test it out; https://jocha.se/blog/tech/exchange-atp-attachment-delay
    Wednesday, March 4, 2020 9:17 PM