You don’t have to know EVERYTHING a threat actor may do….
Inevitably I hear businesses say to me, we can't know EVERYTHING! There are so many threat actors out there, whether it is crimeware, nation states, script kiddies, etc. Do you ever wonder why in cyber security everything is worse case scenarios? It's Chicken Little everyday!
Excuse me for geeking out a bit but most of the time, the file is an executable file, a program, a .exe file which means someone must click on a link, open a document, i.e. do something which causes the program to run for it to actually work. It is always a good idea to have a robust cyber security awareness program for your organization! I would rather someone not open a document than shut down my entire network!