/Safe-Attachments-Policy-using-Defender-for-Office-365

Create a Safe Attachment Policy for HR. Set to Block and redirect to admin email address

Safe-Attachments-Policy-using-Defender-for-Office-365

Create a Safe Attachment Policy for HR. Set to Block and redirect to admin email address.

Description

Lab consists of a create Safe Attachments Policy by using Microsoft Defender for Office 365. Safe Attachments protection for email messages is controlled by Safe Attachments policies. Safe Attachments is a feature in Microsoft Defender for Office 365 that uses a virtual environment to check attachments in inbound email messages after they've been scanned by anti-malware protection.

Environments Used

- Microsoft 365 Defender Portal

Prerequisites

- Safe-Attachment policy can be created or modified by anyone assigned the following roles:

  • Member of the Organization Management
  • Security Administrator
  • Global Administrator
 - Licenses: Microsoft 365 Advanced Threat Protection Plan 1 or 2 OR Microsoft Defender for Office 365 plan 1 and plan 2

Program walk-through:

Steps:

  1. Go to Microsoft 365 Defender --> Policies --> select ‘Threat policies’
  2. Select ‘safe attachments’ --> create new --> give name
  3. Select group ‘HR’
  4. ‘block- block current and future messages’ and enable redirect & give email id
  5. Review & create

Screenshots:

Threat Policies:




Give a Name :


Select 'HR' group:


Policy Settings:


Review & Create:


Result: