Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 991540" data-attributes="member: 32260">Recently, I tested Windows built-in Outlook. It can open Adobe Acrobat and MS Office documents for viewing in the Edge web browser. It is integrated with OneDrive. MS Office documents can be edited online. This could be a safe solution to view the documents contained as attachments in emails. Unfortunately, if the document contains a malicious URL, then the website is opened in the web browser and the weaponized document is downloaded to disk (not directly to OneDrive). So anyway, the weaponized document will be opened by MS Office installed in the system. One could change the download location to OneDrive and block MS Office files via SRP. In such a case the file is blocked except if one will use the right-click Explorer context menu to open it online (&quot;View online&quot; option). Still the safe files can be opened from within the MS Office application.</blockquote>

[QUOTE="Andy Ful, post: 991540, member: 32260"] Recently, I tested Windows built-in Outlook. It can open Adobe Acrobat and MS Office documents for viewing in the Edge web browser. It is integrated with OneDrive. MS Office documents can be edited online. This could be a safe solution to view the documents contained as attachments in emails. Unfortunately, if the document contains a malicious URL, then the website is opened in the web browser and the weaponized document is downloaded to disk (not directly to OneDrive). So anyway, the weaponized document will be opened by MS Office installed in the system. One could change the download location to OneDrive and block MS Office files via SRP. In such a case the file is blocked except if one will use the right-click Explorer context menu to open it online ("View online" option). Still the safe files can be opened from within the MS Office application. [/QUOTE]

Verification