Detections
Analytics

MS.EXO.10.1v1 - Emails SHALL be scanned for malware.

Information

Threat actors can use email as a mechanism for delivering malware. In many cases, scanning can detect malware, reducing the risk for end users.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Any product meeting the requirements outlined in this baseline policy may be
used. If the agency uses Microsoft Defender, see the following
implementation steps for
[enabling preset security policies](./defender.md#implementation), which
include anti-malware protection.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-3

Plugin: microsoft_azure

Control ID: 0bdee9af26bb6617d68517365153010d86dec68103eb0af3dee8d946b9f74781