Forum Discussion
Solved
WHO released emails from quarantine?
Today when I looked at https://security.microsoft.com/quarantine I saw this: I haven't found a way to explain who or how these emails where released. Where do I find this information? Thank...
NicoRotaryCH from the security portal, navigate to the audit blade and search for the activity called the Released Quarantine message
Please click Mark as Best Response & Like if my post helped you to solve your issue. This will help others to find the correct solution easily.
Hello Nico You can view how many emails were sent and received by your user in a day by logging in to Office 365 Admin Portal and clicking on "REPORTS" and then "Sent and received mail" under "Protection". You can then choose custom date selection and change custom date range to one day and click "View table" to see the mail amount in the table view¹. If you want to track which of your admins released email from quarantine, you can turn on audit logging before you can start searching the Office 365 audit log. To turn it on, click "Start recording user and admin activity" on the Audit log search page in the Security & Compliance Centre². I hope this helps!