topic Blocking XPS file types in General Topics

Blocking XPS file types

k.truex — Thu, 16 Aug 2018 16:45:31 GMT

As of late, Ive been seeing more and more xps file types tied to phishing attempts. PAN does catch it "Microsoft Phishing Site Detection", but as a for production. XPS files are not needed.

But as simlar files types are list to be blocked "pdf's, etc", theres no option to block XPS file types?

Could this have been added in a certain OS version? Suggestions?

Example of whats being seen:

https://isc.sans.edu/forums/diary/XPS+Attachment+Used+for+Phishing/23794/

Re: Blocking XPS file types

BPry — Thu, 16 Aug 2018 18:52:14 GMT

@k.truex,

I would reach out to your SE and get a feature request created for it; then share the FR number here so that others can add there vote to it.

Re: Blocking XPS file types

k.truex — Thu, 16 Aug 2018 19:22:31 GMT

Will do "or have done" thanks!