Forum Discussion
Restore original mail due to deleted type of malware mail
Microsoft Protection mail service detected malware and deleted. Is it possible to download original mail to analyse ?
1 Reply
Hey ByamB4,
When MS Defender for Office detects an email that contains a malware, there are several options: quarantine, move to deleted items folder, and others.
If the email was quarantined, you can analyze the malware file using the Threat Management capabilities https://docs.microsoft.com/microsoft-365/security/office-365-security/manage-quarantined-messages-and-files?view=o365-worldwide#atp-only-use-the-security--compliance-center-to-manage-quarantined-files.For more information about additional investigation options, seeFor more information about Threat Explorer capabilities, seehttps://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/threat-explorer?view=o365-worldwide#preview-email-header-and-download-email-body
Please note that download in cases for Explorer, would not work for if the message was permanently deleted by the user (message was not present in deleted folder), or was soft deleted/hard deleted by admin.
