Forum Discussion
Email Showing as Quarantined in a Message Trace, but Not Showing up in MS Defender
A customer of ours was waiting on an email to arrive and to help figure out where the email was or if it was sent yet we ran a message trace. The message trace showed that the email was sent to quarantine. With this information in mind, I went to MS Defender > Email & collaboration > Review > Quarantine but could not find the message.
I modified some of the filters and could not get the quarantined message to appear. I triple checked the filters I created and made sure the information was correct. I also removed all filters and looked for the time period the email came in, but could not find it.
Not sure if this is related, but this email had a significant delay likely coming from the sender.
Any thoughts or ideas? Or anything that I am missing?
1 Reply
You should be able to filter quarantined messages based on the MessageID, which in turn you can get from the message trace:
Get-QuarantineMessage -MessageId "<blabla-AB4D661B46@blabla.com>"