Microsoft Entra Suite Tech Accelerator
Aug 14 2024, 07:00 AM - 09:30 AM (PDT)
Microsoft Tech Community

Defender for Office 365 - Release-QuarantineMessage

Iron Contributor

Hi folks,


When I run Release-QuarantineMessage for a high confidence phish email using the -ReportFalsePositive switch I do not see any report to microsoft in submissions, also when I get the details of the quarantine message it shows as "released" but "Reported" is showing FALSE.


Does anyone else have this issue or can explain why this is happening? 

2 Replies
Furthermore, if I manually submit the message as clean I do see the submission but "reported" is still showing FALSE in powershell.
I assume this is because the message is "high confidence phish" rather than spam. Is there any powershell or api call that can automatically submit these to MSFT as false positive rather than using the GUI/Explorer?