Microsoft Secure Tech Accelerator
Apr 13 2023, 07:00 AM - 12:00 PM (PDT)
Microsoft Tech Community

Restore original mail due to deleted type of malware mail

Occasional Visitor

Microsoft Protection mail service detected malware and deleted. Is it possible to download original mail to analyse ?

1 Reply

Hey @ByamB4,

When MS Defender for Office detects an email that contains a malware, there are several options: quarantine, move to deleted items folder, and others.
If the email was quarantined, you can analyze the malware file using the Threat Management capabilities
For more information about additional investigation options, see 
For more information about Threat Explorer capabilities, see
Please note that download in cases for Explorer, would not work for if the message was permanently deleted by the user (message was not present in deleted folder), or was soft deleted/hard deleted by admin.