SandBlast can analyze links inside .doc files arriving through email attachment?

[MikeB]

Hi Checkmates!, please your help with the following question:

Sandblast (somewhere in the emulation process) can analyze links that comes within a .doc, .pdf, .xls files arriving through email attachment files (MTA) to detect if they lead to malicious sites or zero-day malware files?

[G_W_Albrecht]

Yes, see sk115313: Detecting links to malicious files inside e-mails by Threat Emulation

[MikeB]

Hi Günther, thank you for your answer. I was reviewing the SK you mention but it still left me with the doubt if this applies to links inside documents (for example inside a word doc or pdf) that arrives as an email attachment and not only in the email body.

again thanks for your comments.

[PhoneBoy · Accepted solution]

Yes, see: Threat Emulation File Analyzer 

[MikeB]

Thank you very much Dameon!