Microsoft Defender for Office 365

Safe Attachments

Scans email attachments in a sandboxed environment before delivery to detect malware and zero-day exploits.

Safe Links

Realtime URL scanning that checks links in emails/files at click-time to block access to malicious websites.

Anti-phishing Policies

AI-powered detection of impersonation attempts (CEO fraud) and suspicious email patterns using header/body analysis.

Machine Learning Models

Analyzes message headers, body content patterns, and metadata clusters to detect sophisticated phishing campaigns.

Attachment Reputation Blocking

Blocks malicious files across Office 365 using hash-based reputation systems after initial detection.