Safe Attachments Spo Teams

<# .SYNOPSIS Safe Attachments for SharePoint, OneDrive, Teams .DESCRIPTION Enables ATP Safe Attachments protection for SPO/OneDrive/Teams files .NOTES NL Baseline v2.0 Requires: Microsoft Defender for Office 365 Plan 1/2 #> #Requires -Version 5.1 #Requires -Modules ExchangeOnlineManagement [CmdletBinding()] param([switch]$Monitoring, [switch]$Remediation, [switch]$Revert, [switch]$WhatIf) $ErrorActionPreference = 'Stop' Write-Host "`n========================================" -ForegroundColor Cyan Write-Host "Safe Attachments SPO/OneDrive/Teams" -ForegroundColor Cyan Write-Host "========================================`n" -ForegroundColor Cyan function Invoke-Monitoring { try { Connect-ExchangeOnline -ShowBanner:$false -ErrorAction Stop $config = Get-AtpPolicyForO365 -ErrorAction Stop $spoEnabled = $config.EnableATPForSPOTeamsODB $safeDocsEnabled = $config.EnableSafeDocs Write-Host " Safe Attachments for SPO/OneDrive/Teams: $(if($spoEnabled){'ENABLED'}else{'DISABLED'})" -ForegroundColor $(if ($spoEnabled) { 'Green' }else { 'Red' }) Write-Host " Safe Documents: $(if($safeDocsEnabled){'ENABLED'}else{'DISABLED'})" -ForegroundColor $(if ($safeDocsEnabled) { 'Green' }else { 'Yellow' }) Write-Host "`n Protection covers:" -ForegroundColor Cyan Write-Host " • SharePoint Online files" -ForegroundColor Gray Write-Host " • OneDrive for Business files" -ForegroundColor Gray Write-Host " • Microsoft Teams files" -ForegroundColor Gray if ($spoEnabled) { Write-Host "`n[OK] COMPLIANT - Files are scanned for malware" -ForegroundColor Green exit 0 } else { Write-Host "`n[FAIL] NON-COMPLIANT - Files not protected!" -ForegroundColor Red exit 1 } } catch { Write-Host "ERROR: $_" -ForegroundColor Red Write-Host "Requires: Microsoft Defender for Office 365" -ForegroundColor Yellow exit 2 } } function Invoke-Remediation { try { Connect-ExchangeOnline -ShowBanner:$false -ErrorAction Stop $config = Get-AtpPolicyForO365 -ErrorAction Stop if ($config.EnableATPForSPOTeamsODB) { Write-Host " [OK] Already enabled" -ForegroundColor Green exit 0 } Set-AtpPolicyForO365 -EnableATPForSPOTeamsODB $true -EnableSafeDocs $true -ErrorAction Stop Write-Host "`n[OK] Safe Attachments enabled for:" -ForegroundColor Green Write-Host " • SharePoint Online" -ForegroundColor Cyan Write-Host " • OneDrive for Business" -ForegroundColor Cyan Write-Host " • Microsoft Teams" -ForegroundColor Cyan Write-Host " • Safe Documents" -ForegroundColor Cyan exit 0 } catch { Write-Host "ERROR: $_" -ForegroundColor Red exit 2 } } function Invoke-Revert { try { Connect-ExchangeOnline -ShowBanner:$false -ErrorAction Stop Set-AtpPolicyForO365 -EnableATPForSPOTeamsODB $false -ErrorAction Stop Write-Host " ⚠️ Disabled - files no longer protected!" -ForegroundColor Yellow exit 0 } catch { Write-Host "ERROR: $_" -ForegroundColor Red exit 2 } } try { if ($Revert) { Invoke-Revert } elseif ($Monitoring) { Invoke-Monitoring } elseif ($Remediation) { Invoke-Remediation } else { Write-Host "Use: -Monitoring | -Remediation | -Revert" -ForegroundColor Yellow } } catch { throw } finally { Write-Host "`n========================================`n" -ForegroundColor Cyan }