Safe Attachments
E276965
Safe Attachments is a Microsoft Defender for Office 365 security capability that scans and detonates email attachments in a sandbox environment to block malicious files before they reach users.
All labels observed (1)
| Label | Occurrences |
|---|---|
| Safe Attachments canonical | 2 |
How this entity was disambiguated
This entity first appeared as the object of triple T2554901 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Safe Attachments Context triple: [Microsoft Defender for Office 365, feature, Safe Attachments]
-
A.
Secure Flight
Secure Flight is a U.S. government passenger prescreening program that compares airline traveler information against federal watch lists to enhance aviation security and reduce misidentifications.
-
B.
Ensure
Ensure is a popular nutritional supplement drink brand designed to provide balanced nutrition, often used for meal replacement or to support individuals with increased dietary needs.
-
C.
Annex on the Protection of Confidential Information
The Annex on the Protection of Confidential Information is a key component of the Chemical Weapons Convention that sets out detailed rules and procedures for handling, safeguarding, and limiting the disclosure of sensitive data obtained during the treaty’s implementation and verification activities.
-
D.
Agreement on Safeguards
The Agreement on Safeguards is a World Trade Organization treaty that sets rules for countries to temporarily restrict imports to protect domestic industries from serious injury caused by sudden import surges.
-
E.
Secure Enclave
Secure Enclave is Apple’s dedicated coprocessor for handling sensitive tasks like encryption and biometric data storage in a secure, isolated environment.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Safe Attachments Target entity description: Safe Attachments is a Microsoft Defender for Office 365 security capability that scans and detonates email attachments in a sandbox environment to block malicious files before they reach users.
-
A.
Secure Flight
Secure Flight is a U.S. government passenger prescreening program that compares airline traveler information against federal watch lists to enhance aviation security and reduce misidentifications.
-
B.
Ensure
Ensure is a popular nutritional supplement drink brand designed to provide balanced nutrition, often used for meal replacement or to support individuals with increased dietary needs.
-
C.
Annex on the Protection of Confidential Information
The Annex on the Protection of Confidential Information is a key component of the Chemical Weapons Convention that sets out detailed rules and procedures for handling, safeguarding, and limiting the disclosure of sensitive data obtained during the treaty’s implementation and verification activities.
-
D.
Agreement on Safeguards
The Agreement on Safeguards is a World Trade Organization treaty that sets rules for countries to temporarily restrict imports to protect domestic industries from serious injury caused by sudden import surges.
-
E.
Secure Enclave
Secure Enclave is Apple’s dedicated coprocessor for handling sensitive tasks like encryption and biometric data storage in a secure, isolated environment.
- F. None of above. chosen
Statements (51)
| Predicate | Object |
|---|---|
| instanceOf |
Microsoft Defender for Office 365 capability
ⓘ
email security feature ⓘ |
| analyzesFileType |
Office documents
ⓘ
PDF files ⓘ archive files ⓘ executable files ⓘ |
| availableIn |
Microsoft Defender for Office 365 Plan 1
ⓘ
linked to:
Microsoft Defender for Office 365
Microsoft Defender for Office 365 Plan 2 ⓘ
linked to:
Microsoft Defender for Office 365
certain Microsoft 365 E5 plans ⓘ |
| configurationLocation |
Exchange admin center
ⓘ
Microsoft 365 Defender portal ⓘ
linked to:
Microsoft 365 Defender
|
| deploymentScope |
Exchange Online
ⓘ
Microsoft 365 email workloads ⓘ
linked to:
Exchange Online
Office 365 email ⓘ |
| developedBy | Microsoft ⓘ |
| hasAction |
block attachments
ⓘ
deliver attachments after scanning ⓘ monitor and report only ⓘ replace attachments with a placeholder ⓘ |
| hasFeature |
detailed reporting in Microsoft 365 Defender
ⓘ
dynamic delivery ⓘ integration with Safe Links ⓘ policy-based controls ⓘ scan attachments in real time ⓘ support for internal and external senders ⓘ |
| hasPurpose |
block malware delivered via email attachments
ⓘ
protect users from malicious email attachments ⓘ |
| operatesOn | email attachments ⓘ |
| partOf |
Microsoft 365 security features
ⓘ
Microsoft Defender for Office 365 ⓘ |
| prevents |
delivery of malicious attachments to end users
ⓘ
exploitation of unknown vulnerabilities in attached files ⓘ phishing attachments ⓘ ransomware via email attachments ⓘ zero-day malware via email attachments ⓘ |
| relatedTo |
Safe Links
ⓘ
anti-phishing policies in Microsoft Defender for Office 365 ⓘ |
| securityCategory |
advanced threat protection
ⓘ
email threat protection ⓘ |
| supportsPolicyType |
Safe Attachments policies
ⓘ
per-domain policies ⓘ per-group policies ⓘ per-recipient policies ⓘ |
| targetUser |
Microsoft 365 tenants
ⓘ
linked to:
Microsoft 365
education organizations ⓘ enterprise organizations ⓘ |
| usesTechnique |
behavior-based analysis
ⓘ
detonation of attachments in an isolated environment ⓘ dynamic analysis ⓘ sandbox analysis ⓘ |
| worksWith | Exchange Online Protection ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Safe Attachments Description of subject: Safe Attachments is a Microsoft Defender for Office 365 security capability that scans and detonates email attachments in a sandbox environment to block malicious files before they reach users.
Referenced by (2)
Full triples — surface form annotated when it differs from this entity's canonical label.