Forum Discussion
ATP Attachments and Mail Rules
I guess you can create a rule that checks for the default "Your attachments are being scanned..." text
Pay attention to the list of unsupported scenarios though: https://docs.microsoft.com/en-us/office365/securitycompliance/dynamic-delivery-and-previewing#are-there-scenarios-for-which-dynamic-delivery-is-not-available
I only see that text in the stub of the attachment and not the subject or body. Is the attachment considered body? Or is there header information that has that information? If header, which one?
No, that's my bad. I was referring to the "run a script" action that allowed us to perform additional inspection/actions, but the fact that this option hasn't been available for few years now skipped my mind. So the only possible way would be to check for the presence of the "placeholder" filename ("atp scan in progress.msg").
There is no mail rule that allows you to specify an attachment name. You can look for the presence of an attachment and the size and things like that, but I do not see any rule that states the name of the attachment.
I sent myself an attachment and saved off the before scan and after scan. The message headers of both are identical without any mention of an attachment.
