Safe Attachments

E276965

Safe Attachments is a Microsoft Defender for Office 365 security capability that scans and detonates email attachments in a sandbox environment to block malicious files before they reach users.

Try in SPARQL Jump to: Surface forms Statements Referenced by

All labels observed (1)

Label Occurrences
Safe Attachments canonical 2

Statements (51)

Predicate Object
instanceOf Microsoft Defender for Office 365 capability
email security feature
analyzesFileType Office documents
PDF files
archive files
executable files
availableIn Microsoft Defender for Office 365
surface form: Microsoft Defender for Office 365 Plan 1

Microsoft Defender for Office 365
surface form: Microsoft Defender for Office 365 Plan 2

certain Microsoft 365 E5 plans
configurationLocation Exchange admin center
Microsoft 365 Defender
surface form: Microsoft 365 Defender portal
deploymentScope Exchange Online
Exchange Online
surface form: Microsoft 365 email workloads

Office 365 email
developedBy Microsoft
hasAction block attachments
deliver attachments after scanning
monitor and report only
replace attachments with a placeholder
hasFeature detailed reporting in Microsoft 365 Defender
dynamic delivery
integration with Safe Links
policy-based controls
scan attachments in real time
support for internal and external senders
hasPurpose block malware delivered via email attachments
protect users from malicious email attachments
operatesOn email attachments
partOf Microsoft 365 security features
Microsoft Defender for Office 365
prevents delivery of malicious attachments to end users
exploitation of unknown vulnerabilities in attached files
phishing attachments
ransomware via email attachments
zero-day malware via email attachments
relatedTo Safe Links
anti-phishing policies in Microsoft Defender for Office 365
securityCategory advanced threat protection
email threat protection
supportsPolicyType Safe Attachments policies
per-domain policies
per-group policies
per-recipient policies
targetUser Microsoft 365
surface form: Microsoft 365 tenants

education organizations
enterprise organizations
usesTechnique behavior-based analysis
detonation of attachments in an isolated environment
dynamic analysis
sandbox analysis
worksWith Exchange Online Protection

Referenced by (2)

Full triples — surface form annotated when it differs from this entity's canonical label.