Office 365 ATP Safe Links and ATP Safe Attachments are part of Advanced Threat Protection. Before a user clicks on a link, the URL is rewritten to be scanned first by Microsoft scanning filters. This ensures that they are sent through a phishing filter first before the user is allowed to click on the link. You can then choose to monitor, block or replace the message as you see fit. In my sample, some emails in our testing have been delivered with the most malicious of attachments blocked. With this information, the administrator can take as much action as needed.”]