Safe Attachments

Microsoft Defender for Office 365 Safe Attachments scans email attachments in a sandbox environment to detect zero-day malware.

Note: Requires Microsoft Defender for Office 365 Plan 1 or Plan 2.

Policy Settings

Actions

• Monitor — Scan and track but deliver regardless
• Block — Block messages with detected malware
• Replace — Remove attachment, deliver message with notification
• Dynamic Delivery — Deliver message immediately, replace attachment after scan

API Reference

• GET /api/security/safe-attachments/policies — List policies
• PUT /api/security/safe-attachments/policies/:id — Update policy