This topic provides an overview of the rules for attachment detection in email monitoring.
1. Attachment content detection is limited to the content within standard attachments.
2. The content from large attachments and shared links from DingTalk documents is neither parsed nor detected.
3. The compressed file detection supports files up to 50MB in size. Accepted formats include .zip, .rar, .tar, .tar.gz, .tar.xz, .7z, .tar.bz2.
4. The maximum extraction depth is five layers, with support for retrieving up to 100 files from a single extracted file.
5. For document type detection, supported formats include pdf documents under 5MB (image versions are excluded), along with doc, docx, ppt, pptx, xls, and xlsx files.
6. Detection for other file types is available for files under 50MB, with keyword matching applied to the first 1MB of text.