Forum Discussion

Deleted's avatar
Deleted
Oct 18, 2023

Safe Attachments for SharePoint, OneDrive, and Microsoft Teams

Microsoft 365 uses a common virus detection engine for scanning files that users upload to SharePoint Online, OneDrive, and Microsoft Teams. All file types are not automatically scanned. Heuristics determine the files to scan.

If we turn on Defender for Office 365 for SharePoint, OneDrive, and Microsoft Teams (global settings in Safe attachment), Will it be blocking files based on file hashes or file attachments? Would it be blocking file types like .zip/.rar?  (like the anti-malware policies in which message types with the specified attachments are treated as malware)?

1 Reply

  • ExMSW4319's avatar
    ExMSW4319
    Steel Contributor
    We have HTA in our list of blocked file types for our anti-malware common attachments filter, but I can send a colleague a fake HTA file via Teams. I've then repeated that test with one of my real CPL files (CPL is also in our CAF) and that can be downloaded from Teams too.