"Common Attachment Types Filter" and file types known by Office 365

%3CLINGO-SUB%20id%3D%22lingo-sub-1414594%22%20slang%3D%22en-US%22%3E%22Common%20Attachment%20Types%20Filter%22%20and%20file%20types%20known%20by%20Office%20365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1414594%22%20slang%3D%22en-US%22%3E%3CP%3EHi.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20was%20wondering%2C%20if%20there%20is%20some%20reference%20or%20powershell%20cmdlet%20to%20get%20all%20the%20built%20in%20file%20types%20(96%20are%20shown%20in%20the%20EAC)%20in%20antimalware%20policies%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsecurity%2Foffice-365-security%2Fanti-malware-protection%3Fview%3Do365-worldwide%23anti-malware-policies%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsecurity%2Foffice-365-security%2Fanti-malware-protection%3Fview%3Do365-worldwide%23anti-malware-policies%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22tlid-translation%20translation%22%3E%3CSPAN%20class%3D%22%22%3EFurthermore%2C%20I%20wonder%20which%20file%20types%20Exchange%20Online%20or%20Office%20365%20can%20recognize%20regardless%20of%20the%20file%20extension.%3C%2FSPAN%3E%20%3CSPAN%3EI%20can%20%3C%2FSPAN%3Ea%3CSPAN%20class%3D%22%22%3Edd%20xlsm%20as%20a%20file%20type%20in%20an%20antimalware%20policy%2C%20and%20then%20Excel%20macros%20will%20also%20be%20filtered%2C%20even%20I%20give%20them%20another%20extension.%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22%22%3EWhy%20are%20Excel%20macros%20not%20included%20in%20the%2096%20built-in%20lists%20of%20the%20antimalware%20policies%20by%20default%3F%3CBR%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOther%20palces%2C%20where%20file%20types%20play%20a%20role%3A%3C%2FP%3E%3CP%3ETransport%20Rules%3C%2FP%3E%3CP%3EOWA%20Policies%3C%2FP%3E%3CP%3EOutlook%20Desktop%20Clients%3C%2FP%3E%3CP%3EDLP%3C%2FP%3E%3CP%3ESecurity%20and%20Compliance%3C%2FP%3E%3CP%3E...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22tlid-translation%20translation%22%3E%3CSPAN%20class%3D%22%22%3EIt%20is%20quite%20confusing%20that%20the%20documentation%20of%20the%20individual%20areas%20always%20describes%20different%20file%20types.%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22tlid-translation%20translation%22%3E%3CSPAN%20class%3D%22%22%3EHow%20do%20I%20know%2C%20which%20file%20types%20I%20can%20add%20where%20to%20get%20them%20procecced%20regardless%20of%20the%20file%20name%20extension%3F%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHope%20someone%20can%20help%20here.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBest%20regards%3C%2FP%3E%3CP%3EAndreas%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1414594%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1478777%22%20slang%3D%22en-US%22%3ERe%3A%20%22Common%20Attachment%20Types%20Filter%22%20and%20file%20types%20known%20by%20Office%20365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1478777%22%20slang%3D%22en-US%22%3EHi.%3CBR%20%2F%3EIs%20there%20no%20one%20to%20answer%20this%20question%3F%20Help%20would%20be%20really%20appreciated.%3CBR%20%2F%3E%3CBR%20%2F%3EBest%20regards%20Andreas%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1484744%22%20slang%3D%22en-US%22%3ERe%3A%20%22Common%20Attachment%20Types%20Filter%22%20and%20file%20types%20known%20by%20Office%20365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1484744%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F677871%22%20target%3D%22_blank%22%3E%40AndreasMarx%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EExcel%20Macro%20is%20still%20quite%20widespread%20so%20you%20can't%20automatically%20exclude%20it%20(I%20know%20sounds%20strange).%3C%2FP%3E%3CP%3EI%20think%20following%20statement%20clears%20out%20the%20situation.%20Inspectable%20file%20extensions%20are%20known%20to%20antimalware%20policies%20and%20don't%20really%20on%20name%20comparision.%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsecurity%2Foffice-365-security%2Fanti-malware-protection-faq-eop%3Fview%3Do365-worldwide%23how-can-i-configure-the-service-to-block-specific-executable-files-such-as-exe-that-i-fear-may-contain-malware%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsecurity%2Foffice-365-security%2Fanti-malware-protection-faq-eop%3Fview%3Do365-worldwide%23how-can-i-configure-the-service-to-block-specific-executable-files-such-as-exe-that-i-fear-may-contain-malware%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFollowing%20section%20talks%20about%20the%20inspectable%20filetypes.%20Take%20a%20look%20if%20it%20helps%20you.%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fexchange%2Fsecurity-and-compliance%2Fmail-flow-rules%2Finspect-message-attachments%23supported-file-types-for-mail-flow-rule-content-inspection%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fexchange%2Fsecurity-and-compliance%2Fmail-flow-rules%2Finspect-message-attachments%23supported-file-types-for-mail-flow-rule-content-inspection%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWith%20those%20documentation%20I%20would%20start%20my%20scenario's.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHope%20it%20helps.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Visitor

Hi.

 

I was wondering, if there is some reference or powershell cmdlet to get all the built in file types (96 are shown in the EAC) in antimalware policies:

https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/anti-malware-protection?...

 

Furthermore, I wonder which file types Exchange Online or Office 365 can recognize regardless of the file extension. I can add xlsm as a file type in an antimalware policy, and then Excel macros will also be filtered, even I give them another extension. Why are Excel macros not included in the 96 built-in lists of the antimalware policies by default?

 

Other palces, where file types play a role:

Transport Rules

OWA Policies

Outlook Desktop Clients

DLP

Security and Compliance

...

 

It is quite confusing that the documentation of the individual areas always describes different file types.

 

How do I know, which file types I can add where to get them procecced regardless of the file name extension?

 

Hope someone can help here.

 

Best regards

Andreas

2 Replies
Highlighted
Hi.
Is there no one to answer this question? Help would be really appreciated.

Best regards Andreas
Highlighted

Hi @AndreasMarx 

Excel Macro is still quite widespread so you can't automatically exclude it (I know sounds strange).

I think following statement clears out the situation. Inspectable file extensions are known to antimalware policies and don't really on name comparision.

https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/anti-malware-protection-...

 

Following section talks about the inspectable filetypes. Take a look if it helps you.

https://docs.microsoft.com/en-us/exchange/security-and-compliance/mail-flow-rules/inspect-message-at...

 

With those documentation I would start my scenario's.

 

Hope it helps.

 

Regards