Detections
Analytics

MS.EXO.15.3v1 - User click tracking SHOULD be enabled.

Information

Users may click on malicious links in emails, leading to compromise or unauthorized data disclosure. Enabling user click tracking lets agencies know if a malicious link may have been visited after the fact to help tailor a response to a potential incident.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Any product meeting the requirements outlined in this baseline policy may be
used. If the agency uses Microsoft Defender for Office 365, see the following
implementation steps for
[enabling preset security policies](./defender.md#msdefender13v1), which
include Safe Links click protections to track user clicks on links in email.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

References: 800-53|AU-12c., 800-53|SI-3

Plugin: microsoft_azure

Control ID: 9ea0ad63a09574dd75a26046c688c06e06c08cf2595f77f99dd6575a90021262