Safe attachments unknown malware response set to block messages.

Why This Matter

Malware hidden in email attachments is a primary vector for initial compromise. Without a block policy, suspicious attachments are delivered to users, increasing the risk of ransomware or data theft. Enabling this setting forces the system to quarantine any file that cannot be confirmed as safe.

What Aether365 Checks

Aether365 verifies that the Safe Attachments policy for your Microsoft 365 tenant has the Unknown Malware Response set to Block. This check appears in the Aether365 dashboard under the microsoft-365 category.