Forum Discussion

chadsung's avatar
chadsung
Copper Contributor
Feb 28, 2023
Solved

ZAP Result

Hi,   When dealing with an email that was handled by the ZAP action, I came across this result "ZAP took no action due to user triage" and the final action taken being "None". The email was origin...
  • ExMSW4319's avatar
    Feb 28, 2023
    There isn't a definitive Microsoft item of documentation describing user triage (Google Search). My interpretation of the event is by the time ZAP acted, the user had already deleted the item. Remember that Threat Explorer does not show user actions. You can only infer them from manual and automated remediation results.