Forum Discussion
Create playbook to release requested quarantined emails?
I can't find any information on possibility of releasing quarantined emails of the alert created by Microsoft Defender XDR. Such as "User requested to release a quarantined message" and "User request...
I am also interested in this but as far as I research the only some possible way is via running a Powershell script. So there should be a way to run a PS script via logic app. Haven't got yet time to play with it, but it would be useful to have an API.