Skip to content

Commit 7e885f8

Browse files
committed
Minor formatting updates
1 parent c250f50 commit 7e885f8

File tree

2 files changed

+62
-70
lines changed

2 files changed

+62
-70
lines changed

defender-office-365/safe-attachments-policies-configure.md

Lines changed: 37 additions & 41 deletions
Original file line numberDiff line numberDiff line change
@@ -184,22 +184,22 @@ Select a policy by clicking anywhere in the row other than the check box next to
184184

185185
In the Microsoft Defender portal at <https://security.microsoft.com>, go to **Email & Collaboration** \> **Policies & Rules** \> **Threat policies** \> **Safe Attachments** in the **Policies** section. To go directly to the **Safe Attachments** page, use <https://security.microsoft.com/safeattachmentv2>.
186186

187-
2. On the **Safe Attachments** page, select the Safe Attachments policy by using either of the following methods:
187+
On the **Safe Attachments** page, select the Safe Attachments policy by using either of the following methods:
188188

189-
- Select the policy from the list by selecting the check box next to the name. The following actions are available in the :::image type="icon" source="media/m365-cc-sc-more-actions-icon.png" border="false"::: **More actions** dropdown list that appears:
190-
- **Enable selected policies**.
191-
- **Disable selected policies**.
192-
- **Delete selected policies**.
189+
- Select the policy from the list by selecting the check box next to the name. The following actions are available in the :::image type="icon" source="media/m365-cc-sc-more-actions-icon.png" border="false"::: **More actions** dropdown list that appears:
190+
- **Enable selected policies**.
191+
- **Disable selected policies**.
192+
- **Delete selected policies**.
193193

194-
:::image type="content" source="media/safe-attachments-policies-main-page.png" alt-text="The Safe Attachments page with a policy selected and the More actions control expanded." lightbox="media/safe-attachments-policies-main-page.png":::
194+
:::image type="content" source="media/safe-attachments-policies-main-page.png" alt-text="The Safe Attachments page with a policy selected and the More actions control expanded." lightbox="media/safe-attachments-policies-main-page.png":::
195195

196-
- Select the policy from the list by clicking anywhere in the row other than the check box next to the name. Some or all following actions are available in the details flyout that opens:
197-
- Modify policy settings by clicking **Edit** in each section (custom policies or the default policy)
198-
- :::image type="icon" source="media/m365-cc-sc-turn-on-off-icon.png" border="false"::: **Turn on** or :::image type="icon" source="media/m365-cc-sc-turn-on-off-icon.png" border="false"::: **Turn off** (custom policies only)
199-
- :::image type="icon" source="media/m365-cc-sc-increase-icon.png" border="false"::: **Increase priority** or :::image type="icon" source="media/m365-cc-sc-decrease-icon.png" border="false"::: **Decrease priority** (custom policies only)
200-
- :::image type="icon" source="media/m365-cc-sc-delete-icon.png" border="false"::: **Delete policy** (custom policies only)
196+
- Select the policy from the list by clicking anywhere in the row other than the check box next to the name. Some or all following actions are available in the details flyout that opens:
197+
- Modify policy settings by clicking **Edit** in each section (custom policies or the default policy)
198+
- :::image type="icon" source="media/m365-cc-sc-turn-on-off-icon.png" border="false"::: **Turn on** or :::image type="icon" source="media/m365-cc-sc-turn-on-off-icon.png" border="false"::: **Turn off** (custom policies only)
199+
- :::image type="icon" source="media/m365-cc-sc-increase-icon.png" border="false"::: **Increase priority** or :::image type="icon" source="media/m365-cc-sc-decrease-icon.png" border="false"::: **Decrease priority** (custom policies only)
200+
- :::image type="icon" source="media/m365-cc-sc-delete-icon.png" border="false"::: **Delete policy** (custom policies only)
201201

202-
:::image type="content" source="media/anti-phishing-policies-details-flyout.png" alt-text="The details flyout of a custom Safe Attachments policy." lightbox="media/anti-phishing-policies-details-flyout.png":::
202+
:::image type="content" source="media/anti-phishing-policies-details-flyout.png" alt-text="The details flyout of a custom Safe Attachments policy." lightbox="media/anti-phishing-policies-details-flyout.png":::
203203

204204
The actions are described in the following subsections.
205205

@@ -302,7 +302,7 @@ Creating a Safe Attachments policy in PowerShell is a two-step process:
302302

303303
To create a safe attachment policy, use this syntax:
304304

305-
```PowerShell
305+
```powershell
306306
New-SafeAttachmentPolicy -Name "<PolicyName>" -Enable $true [-AdminDisplayName "<Comments>"] [-Action <Allow | Block | DynamicDelivery>] [-Redirect <$true | $false>] [-RedirectAddress <SMTPEmailAddress>] [-QuarantineTag <QuarantinePolicyName>]
307307
```
308308

@@ -311,7 +311,7 @@ This example creates a safe attachment policy named Contoso All with the followi
311311
- Block messages that are found to contain malware by Safe Documents scanning (we aren't using the _Action_ parameter, and the default value is `Block`).
312312
- The default quarantine policy is used (AdminOnlyAccessPolicy), because we aren't using the _QuarantineTag_ parameter.
313313

314-
```PowerShell
314+
```powershell
315315
New-SafeAttachmentPolicy -Name "Contoso All" -Enable $true
316316
```
317317

@@ -324,7 +324,7 @@ For detailed syntax and parameter information, see [New-SafeAttachmentPolicy](/p
324324

325325
To create a safe attachment rule, use this syntax:
326326

327-
```PowerShell
327+
```powershell
328328
New-SafeAttachmentRule -Name "<RuleName>" -SafeAttachmentPolicy "<PolicyName>" <Recipient filters> [<Recipient filter exceptions>] [-Comments "<OptionalComments>"] [-Enabled <$true | $false>]
329329
```
330330

@@ -345,19 +345,19 @@ For detailed syntax and parameter information, see [New-SafeAttachmentRule](/pow
345345

346346
To view existing safe attachment policies, use the following syntax:
347347

348-
```PowerShell
348+
```powershell
349349
Get-SafeAttachmentPolicy [-Identity "<PolicyIdentity>"] [| <Format-Table | Format-List> <Property1,Property2,...>]
350350
```
351351

352352
This example returns a summary list of all safe attachment policies.
353353

354-
```PowerShell
354+
```powershell
355355
Get-SafeAttachmentPolicy
356356
```
357357

358358
This example returns detailed information for the safe attachment policy named Contoso Executives.
359359

360-
```PowerShell
360+
```powershell
361361
Get-SafeAttachmentPolicy -Identity "Contoso Executives" | Format-List
362362
```
363363

@@ -367,29 +367,29 @@ For detailed syntax and parameter information, see [Get-SafeAttachmentPolicy](/p
367367

368368
To view existing safe attachment rules, use the following syntax:
369369

370-
```PowerShell
370+
```powershell
371371
Get-SafeAttachmentRule [-Identity "<RuleIdentity>"] [-State <Enabled | Disabled>] [| <Format-Table | Format-List> <Property1,Property2,...>]
372372
```
373373

374374
This example returns a summary list of all safe attachment rules.
375375

376-
```PowerShell
376+
```powershell
377377
Get-SafeAttachmentRule
378378
```
379379

380380
To filter the list by enabled or disabled rules, run the following commands:
381381

382-
```PowerShell
382+
```powershell
383383
Get-SafeAttachmentRule -State Disabled
384384
```
385385

386-
```PowerShell
386+
```powershell
387387
Get-SafeAttachmentRule -State Enabled
388388
```
389389

390390
This example returns detailed information for the safe attachment rule named Contoso Executives.
391391

392-
```PowerShell
392+
```powershell
393393
Get-SafeAttachmentRule -Identity "Contoso Executives" | Format-List
394394
```
395395

@@ -403,7 +403,7 @@ Otherwise, the same settings are available when you create a safe attachment pol
403403

404404
To modify a safe attachment policy, use this syntax:
405405

406-
```PowerShell
406+
```powershell
407407
Set-SafeAttachmentPolicy -Identity "<PolicyName>" <Settings>
408408
```
409409

@@ -420,7 +420,7 @@ Otherwise, the same settings are available when you create a rule as described i
420420

421421
To modify a safe attachment rule, use this syntax:
422422

423-
```PowerShell
423+
```powershell
424424
Set-SafeAttachmentRule -Identity "<RuleName>" <Settings>
425425
```
426426

@@ -432,19 +432,19 @@ Enabling or disabling a safe attachment rule in PowerShell enables or disables t
432432

433433
To enable or disable a safe attachment rule in PowerShell, use this syntax:
434434

435-
```PowerShell
435+
```powershell
436436
<Enable-SafeAttachmentRule | Disable-SafeAttachmentRule> -Identity "<RuleName>"
437437
```
438438

439439
This example disables the safe attachment rule named Marketing Department.
440440

441-
```PowerShell
441+
```powershell
442442
Disable-SafeAttachmentRule -Identity "Marketing Department"
443443
```
444444

445445
This example enables same rule.
446446

447-
```PowerShell
447+
```powershell
448448
Enable-SafeAttachmentRule -Identity "Marketing Department"
449449
```
450450

@@ -456,13 +456,13 @@ The highest priority value you can set on a rule is 0. The lowest value you can
456456

457457
To set the priority of a safe attachment rule in PowerShell, use the following syntax:
458458

459-
```PowerShell
459+
```powershell
460460
Set-SafeAttachmentRule -Identity "<RuleName>" -Priority <Number>
461461
```
462462

463463
This example sets the priority of the rule named Marketing Department to 2. All existing rules that have a priority less than or equal to 2 are decreased by 1 (their priority numbers are increased by 1).
464464

465-
```PowerShell
465+
```powershell
466466
Set-SafeAttachmentRule -Identity "Marketing Department" -Priority 2
467467
```
468468

@@ -476,13 +476,13 @@ When you use PowerShell to remove a safe attachment policy, the corresponding sa
476476

477477
To remove a safe attachment policy in PowerShell, use this syntax:
478478

479-
```PowerShell
479+
```powershell
480480
Remove-SafeAttachmentPolicy -Identity "<PolicyName>"
481481
```
482482

483483
This example removes the safe attachment policy named Marketing Department.
484484

485-
```PowerShell
485+
```powershell
486486
Remove-SafeAttachmentPolicy -Identity "Marketing Department"
487487
```
488488

@@ -494,13 +494,13 @@ When you use PowerShell to remove a safe attachment rule, the corresponding safe
494494

495495
To remove a safe attachment rule in PowerShell, use this syntax:
496496

497-
```PowerShell
497+
```powershell
498498
Remove-SafeAttachmentRule -Identity "<PolicyName>"
499499
```
500500

501501
This example removes the safe attachment rule named Marketing Department.
502502

503-
```PowerShell
503+
```powershell
504504
Remove-SafeAttachmentRule -Identity "Marketing Department"
505505
```
506506

@@ -512,14 +512,10 @@ To verify that you've successfully created, modified, or removed Safe Attachment
512512

513513
- On the **Safe Attachments** page in the Microsoft Defender portal at <https://security.microsoft.com/safeattachmentv2>, verify the list of policies, their **Status** values, and their **Priority** values. To view more details, select the policy from the list by clicking on the name, and view the details in the fly out.
514514

515-
- In Exchange Online PowerShell, replace \<Name\> with the name of the policy or rule, run the following command, and verify the settings:
516-
517-
```PowerShell
518-
Get-SafeAttachmentPolicy -Identity "<Name>" | Format-List
519-
```
515+
- In Exchange Online PowerShell, replace \<Name\> with the name of the policy or rule, run the following commands, and verify the settings:
520516

521-
```PowerShell
522-
Get-SafeAttachmentRule -Identity "<Name>" | Format-List
517+
```powershell
518+
Get-SafeAttachmentPolicy -Identity "<Name>" | Format-List; Get-SafeAttachmentRule -Identity "<Name>" | Format-List
523519
```
524520

525521
- To verify that Safe Attachments is scanning messages, check the available Defender for Office 365 reports. For more information, see [View reports for Defender for Office 365](reports-defender-for-office-365.md) and [Use Explorer in the Microsoft Defender portal](threat-explorer-real-time-detections-about.md).

0 commit comments

Comments
 (0)