So, how do Safe Links works in Teams at a high level? Simple:
- A user starts the Teams app.
- Microsoft 365 verifies that the user’s organization includes Microsoft Defender for Office 365, and that the user is included in an active Safe Links policy where protection for Microsoft Teams is enabled.
- URLs are validated at the time of click for the user in chats, group chats, channels, and tabs.
Microsoft Defender for Office 365 for SharePoint, OneDrive, and Microsoft Teams protects your organization from malicious files.
Safe Attachments for SharePoint, OneDrive, and Microsoft Teams helps detect and block existing files that are identified as malicious in team sites and document libraries.
When Safe Attachments for SharePoint, OneDrive, and Microsoft Teams is enabled and identifies a file as malicious, the file is locked using direct integration with the file stores.
Although the blocked file is still listed in the document library and in web, mobile, or desktop applications, people can’t open, copy, move, or share the file. But they can delete the blocked file.