Forum Discussion
Solved
WHO released emails from quarantine?
Today when I looked at https://security.microsoft.com/quarantine I saw this: I haven't found a way to explain who or how these emails where released. Where do I find this information? Thank...
NicoRotaryCH from the security portal, navigate to the audit blade and search for the activity called the Released Quarantine message
Please click Mark as Best Response & Like if my post helped you to solve your issue. This will help others to find the correct solution easily.
NicoRotaryCH lets do this, in the audit logs blade select all the quarantine activities and check what results will get you. Don't forget to set the date of you incident
- well, something happened in the backend, do you have any automation that release messages automatically? if not I suggest you open a ticket with the Exchange team to check if something abnormal happened from their end within your tenant.
- Will do, thank you!