locked
Is there any files or URLs for testing ATP "Safe attachment" and "Safe link"? RRS feed

  • Question

  • Hello,

    I'm looking for sample files and sample URLs which are to be detected by ATP filtering.
    Where can we get any sample objects for testing?

    Thank you in advance.
    Saki

    Wednesday, October 5, 2016 2:39 AM

All replies

  • You can use the EICAR test as detailed here: https://technet.microsoft.com/en-us/library/jj200745(v=exchg.150).aspx

    There are some other similar tests, do a search on your favourite search engine.

    Wednesday, October 5, 2016 6:52 AM
  • Hi Vasil,

    Thank you for your comment.

    It is true that we can use EICAR test for testing malware filter, but I'd like to test ATP feature.
    Using EICAR test file, it is blocked by malware filter before it reaches "Safe attachment" filter, unfortunately.

    I suppose that any appropriate test file is required since ATP is for zero-day attack, not for known malwares.

    Saki

    Wednesday, October 5, 2016 8:14 AM
  • Hi,

    Sorry, I have found no official test attachment and link for ATP.

    But I also have found the following articles which tested the bad attachment and link for your reference:

    http://www.conquest247.com/advanced-threat-protection-in-exchange-online-protection/

    http://c7solutions.com/2015/06/getting-started-with-office-365-advanced-threat-protection

    Please note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

    Hope it's helpful to you.

    Regards,


    David Wang
    TechNet Community Support


    Please remember to mark the replies as an answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.



    • Edited by David Wang_ Thursday, October 6, 2016 4:20 AM
    • Proposed as answer by David Wang_ Monday, October 10, 2016 9:57 AM
    Thursday, October 6, 2016 3:20 AM
  • Hi David,

    Thank you for your comment.

    Your links help me to ask their authors to share bad attachments and URLs.
    I will wait for his reply on his blog for now.

    Thanks,

    Saki

    Thursday, October 6, 2016 11:05 AM
  • 

    Hi,

    How about the issue? Are above replies helpful to you?

    If the issue is resolved, please mark some helpful replies as answers, that will encourage people to take time out to help you. 

    Thanks,


    David Wang
    TechNet Community Support


    Please remember to mark the replies as an answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, October 10, 2016 9:57 AM
  • There are actually test values you can use.

    See here for detail: 

    https://technet.microsoft.com/en-us/library/mt490479.aspx


    Mike Crowley | MVP
    My Blog -- Baseline Technologies

    • Proposed as answer by Mike Crowley Tuesday, October 25, 2016 1:29 AM
    Tuesday, October 25, 2016 1:29 AM
  • The built in reporting for Office 365 Safe Attachment delays is non-existent. Fortunately we were able to put together a script which could get the data from Exchange Online and then visualize it through Power BI.

    Feel free to take a look and test it out; https://jocha.se/blog/tech/exchange-atp-attachment-delay
    Wednesday, March 4, 2020 9:17 PM