We are currenlty trying to research the ability to quarantine/drop message with PDF documents that have a specific MD5 hash associated with it. Please advise.
We do not have the ability to quarantine based on a hash of a file. If you would like this added, you can submit a request here.
I would suggest however that a hash is not a good way to decide what files to quarantine. Changing a single character in the file (such as a date attribute of the file) would significantly change the hash, making it unusable. We can do conent filtering of PDF files, so it may be more practical to searchfor certain strings instead.