Announcing Microsoft Defender for Office 365 API’s for retrieving threat data and remediating emails

cammurray soumyamishra I’m having some issues with this API returning the detonation details associated with an email.   I can see that the item returned displays an attachmentsCount of 1 or greater but the attachments property is always empty. Has anyone else observed this?

Edit: figured it out. I was using the filter parameters when I needed to supply the analyzedemailID. 

Another question now though, I don’t see anything in the detonationdetails property despite seeing them in the UI in the Defender portal.