topic Re: SandBlast can analyze links inside .doc files arriving through email attachment? in Firewall and Security Management

SandBlast can analyze links inside .doc files arriving through email attachment?

MikeB — Wed, 19 Dec 2018 15:01:13 GMT

Hi Checkmates!, please your help with the following question:

Sandblast (somewhere in the emulation process) can analyze links that comes within a .doc, .pdf, .xls files arriving through email attachment files (MTA) to detect if they lead to malicious sites or zero-day malware files?

Re: SandBlast can analyze links inside .doc files arriving through email attachment?

G_W_Albrecht — Wed, 19 Dec 2018 15:56:27 GMT

Yes, see sk115313: Detecting links to malicious files inside e-mails by Threat Emulation

Re: SandBlast can analyze links inside .doc files arriving through email attachment?

MikeB — Mon, 11 Feb 2019 23:06:35 GMT

Hi Günther, thank you for your answer. I was reviewing the SK you mention but it still left me with the doubt if this applies to links inside documents (for example inside a word doc or pdf) that arrives as an email attachment and not only in the email body.

again thanks for your comments.

Re: SandBlast can analyze links inside .doc files arriving through email attachment?

PhoneBoy — Sat, 23 Feb 2019 14:34:05 GMT

Yes, see: Threat Emulation File Analyzer

Re: SandBlast can analyze links inside .doc files arriving through email attachment?

MikeB — Mon, 25 Feb 2019 16:24:31 GMT

Thank you very much Dameon!