Forum Discussion
How to create a rule in Defender for o365 to quarantine with the "Sender display name" condition ?
Does it possible to create a rule in Defender for o365 to quarantine if the "Sender display name" is Vipps ?
3 Replies
Hivinaybabupamu !
I would recommend that you analyze the headers of one of the emails that you want to try and quarantine.
With a little bit of luck, the From header will include the displayname and you could then create a mail flow (transport) rule in Exchange Online to look for emails where that displayname is present in the From header. And if it is, then send to quarantine.
Hope this helps! Let me know if further help is needed!
Kind Regards
Oliwer Sundgren
