Forum Discussion

Mitch King's avatar
Mitch King
Iron Contributor
Jun 08, 2023

Defender for Office 365 - Release-QuarantineMessage

Hi folks,

 

When I run Release-QuarantineMessage for a high confidence phish email using the -ReportFalsePositive switch I do not see any report to microsoft in submissions, also when I get the details of the quarantine message it shows as "released" but "Reported" is showing FALSE.

 

Does anyone else have this issue or can explain why this is happening? 

2 Replies

  • Mitch King's avatar
    Mitch King
    Iron Contributor
    Jun 08, 2023
    Furthermore, if I manually submit the message as clean I do see the submission but "reported" is still showing FALSE in powershell.
    • Mitch King's avatar
      Mitch King
      Iron Contributor
      Jun 08, 2023
      I assume this is because the message is "high confidence phish" rather than spam. Is there any powershell or api call that can automatically submit these to MSFT as false positive rather than using the GUI/Explorer?