Hi, I'm curious what people use to avoid malware executable being bypassed because their extensions are typically associated with file types that are not normally executable?
https://twitter.com/jepayneMSFT/status/969742842410094593 Do you just rely on clamav? Do you do any types of checks of the actual bytes in the file to confirm they're in line with what that file type should be? How would this even present itself in an email?
