Hashes and public corpus links. No attachments of unknown binaries. No 'just a little sample'. No cloud links to mystery zips.
If you think that is harsh, you have not cleaned a host. I have. It is harsh on purpose.
Refs: CVE Program
Lab / educational. Public binaries and patched classes only. Isolated VM.