Microsoft Defender
      Back to home
      1. Sittadel Knowledge Base
      2. Management Guides
      3. Microsoft Defender

      Defender for Email File Block

      This guide will show an administrator how to block a specified file from being present in an incoming or outgoing email.

      Role Requirements

      Procedure Scope: Administrators

      Required Group Membership: Admin.Security

      Handbook Reference

      Package: Email Security

      Domain: File Management

      Modifies: Unsanctioned Files

      Defender for Email File Block

      1. Navigate to the Tenant Allow/Block Lists – Microsoft Defender portal, locate and select the Block action under the Files tab. A flyout will be displayed where you will be able to specify a SHA256 file hash (max limit of 20) within the Add file hashes field. Specify the timeframe as Never Expire from the Remove block entry after dropdown. Lastly provide a reference point for fellow administration on why the block has been instated under the Optional note field. Select Add to finalize the block.

      Need Assistance?

      Reach out to your Customer Success Manager to discuss how a Sittadel cybersecurity analyst can assist in managing these tasks for you. New to our services? Inquire about arranging a consultation to explore optimizing your Azure environment for painless management.