Microsoft now automatically turns on AMSI macro  technology to protect against malicious macros for Office 365 ProPlus subscribers

https://redmondmag.com/articles/2018/09/17/office-365-proplus-macro-scanner.aspx

https://cloudblogs.microsoft.com/microsoftsecure/2018/09/12/office-vba-amsi-parting-the-veil-on-malicious-macros/

Microsoft has turned on a technology to protect against malicious macros for Office 365 ProPlus subscribers, the company announced last week.

The technology, called Antimalware Scan Interface (AMSI), has been around since 2015, but it’s now newly integrated with Office 365 ProPlus. Microsoft turned AMSI on by default “on the Monthly Channel for Office 365 client applications including Word, Excel, PowerPoint, Access, Visio and Publisher,” Microsoft indicated, in its September 12 announcement.  With AMSI’s integration with Office 365 ProPlus, IT professionals now have new Group Policy security setting called Macro Runtime Scan Scope.” This policy lets IT pros disable scanning for all documents, enable scanning for low-trust documents or enable scanning for all documents.