Configuring Safe Attachments options and policies
Safe Attachments is a Microsoft Defender for Office 365 feature that allows you to protect your users from opening attachments that may contain malicious code. This works through the use of a virtual environment that Safe Attachments uses to check the attachments in inbound emails. This takes place after the attachment has been scanned by Exchange Online anti-malware protection. Safe Attachments policies are configured either in the Microsoft 365 Defender portal or in PowerShell.
A Safe Attachments policy comprises the following:
- Safe Attachments policy: Defines and sets actions for unknown malware detection and can be set to send messages with malware attachments to a specific email address. The policy will also determine whether to deliver messages if attachment scanning cannot be completed.
- Safe Attachments rule: Defines the priority and filters to which recipients the policy will apply.
In this section, we...