ORCA.158 - Safe Attachments is enabled for SharePoint and Teams.
Overview
Safe Attachments can assist by scanning for zero day malware by using behavioural analysis and sandboxing techniques. These checks suppliment signature definitions.
Remediation action
Enable Safe Attachments for SharePoint and Teams.
Related Links
- Microsoft 365 Defender Portal - Safe attachments
- Recommended settings for EOP and Microsoft Defender for Office 365
Test Metadata
| Field | Value |
|---|---|
| Test ID | ORCA.158 |
| Severity | Medium |
| Suite | ORCA |
| Category | EXO |
| PowerShell test | Test-ORCA158 |
| Tags | EXO, ORCA, ORCA.158 |
Source
- Pester test:
tests/orca/Test-ORCA158.Tests.ps1 - PowerShell source:
powershell/public/orca/Test-ORCA158.ps1