Forum Discussion
Solved
See which email triggers "User requested to release a quarantined message"
Hi, I'm trying to automate response to incidents regarding "User requested to release a quarantined message". The problem with this incidents is that it doesn't list which specific email the use...
pednie you can use the audit blade in defender portal and create a search audit using the below activity , this will give you the activities performed by your users when they requested a release of an email from the quarantine
Thank you for your respons!
Unfortunately I don't have Audit available. Any other solutions?
what permissions you have to the portal ? try to access it using global admin user
- It worked with global admin, thank you
Please click Mark as Best Response & Like if my post helped you to solve your issue. This will help others to find the correct solution easily.