Advice Request File wall - CDR security layer

[Andy Ful]

According to the Verizon 2020 Data Breach Investigations Report2, an estimated 94 percent of malware is delivered via email with 90 percent of malware hidden in common file types such as PDF, Word, Excel, and Zip.

CDR describes the process of creating a safe copy of an original file by including only the safe elements from the original file. The process offers a detection-less and streamlined solution that is notably different from common  sandbox-based antimalware tools in the market.

Microsoft 365 and Exchange Online administrators can get a free license of FileWall here

The full article is available here:

odix and Microsoft: Protecting users against malware attacks with free FileWall license | Microsoft Security Blog

FileWall brings malware protection capabilities by providing an essential added layer of deep file inspection technology.

www.microsoft.com

 

[Andy Ful]

I hope that similar solutions will be available also for all MD users.

 

[SeriousHoax]

It seems like a better, greater and much more capable version of Norton Script Control available in the home products.

Spoiler

Learn more about Norton Script Control

Learn about active content and why Norton removes documents with active content in it.

support.norton.com

 

[Andy Ful]

It seems that Microsoft's security development has been noticed by the Forrester Wave:



We may only hope that this can also improve the Microsoft Defender protection for Home users.

 

[wat0114]

I knew email malware was significant, but 94% ...Wow!

 

[ErzCrz]

I wonder how much email clients play a part in the protection. I know Windows has a built-in Attachment Manager which can be configure to High Risk, Moderate Risk and Low Risk. Maybe something that can be managed via ConfigureDefender or H_C/SWH? The default level is "Moderate".

I don't know enough about it really but info here: Information about the Attachment Manager in Microsoft Windows

The other option is to turn off downloading full message in your sync settings.

EDIT: I see @Andy Ful is already has solutions. Q&A - Simple Windows Hardening