windows-itpro-docs/windows/security/threat-protection/microsoft-defender-atp/manage-automation-file-uploads.md

title, description, keywords, search.product, search.appverid, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, ms.author, author, ms.localizationpriority, manager, audience, ms.collection, ms.topic

title	description	keywords	search.product	search.appverid	ms.prod	ms.mktglfcycl	ms.sitesec	ms.pagetype	ms.author	author	ms.localizationpriority	manager	audience	ms.collection	ms.topic
Manage automation file uploads	Enable content analysis and configure the file extension and email attachment extensions that will be submitted for analysis	automation, file, uploads, content, analysis, file, extension, email, attachment	eADQiWindows 10XVcnh	met150	w10	deploy	library	security	macapara	mjcaparas	medium	dansimp	ITPro	M365-security-compliance	article

Manage automation file uploads

Applies to:

• Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)

Want to experience Microsoft Defender ATP? Sign up for a free trial.

Enable the content analysis capability so that certain files and email attachments can automatically be uploaded to the cloud for additional inspection in Automated investigation.

Identify the files and email attachments by specifying the file extension names and email attachment extension names.

For example, if you add exe and bat as file or attachment extension names, then all files or attachments with those extensions will automatically be sent to the cloud for additional inspection during Automated investigation.

Add file extension names and attachment extension names.

1. In the navigation pane, select Settings > Automation file uploads.

2. Toggle the content analysis setting between On and Off.

3. Configure the following extension names and separate extension names with a comma:

   • File extension names - Suspicious files except email attachments will be submitted for additional inspection

Related topics

• Manage automation folder exclusions