Description:
Verifies that at least one malware filter policy on the tenant covers the comprehensive attachment filter extension list with an enabled rule. Microsoft's default policy covers only 53 extensions.
Why:
Comprehensive attachment filtering blocks known and custom malicious file types from being attached to emails. Microsoft's default policy covers only 53 extensions; the recommended state pairs a policy covering a comprehensive list of high-risk extensions with an enabled rule, reducing the risk of malware delivered via email attachments.
Configured: At least one MalwareFilterPolicy on this tenant covers the comprehensive attachment filter extension list with an enabled rule.
Not Configured: No MalwareFilterPolicy on this tenant meets the comprehensive attachment filtering criteria.
Scoring: Contributes up to 1 point to the Posture Recommendations score.
Category: Exchange
Microsoft Licensing: Works with Basic licensing
Secure Score Impact: Not verified. No Microsoft Secure Score control could be confirmed for this setting from published sources. See the note in README.md before publishing this field.
Remediation in Augmentt: Configure directly in Augmentt (Configure tab); Guided remediation steps (Instructions tab)
Compliance Frameworks:
CIS Microsoft 365 Benchmark v6 (Level 2) — 2.1.11
CIS Controls v8 — 9.6
Microsoft documentation: