Forum Discussion
Feedback: Email Quarantine UI needs improvement re: reporting sender as safe/unsafe
This is feedback for Microsoft 365 Defender (part of my organization's Office 365). I can't use the Feedback link within the site (security.[tenant info]/homepage) because of my organization's network security settings.
When Outlook tells me I have emails in Quarantine and I'm sent to the site, the UI just has options focused on releasing or deleting the quarantined emails. The algorithm often blocks legitimate emails and I want to provide feedback to the algorithm so it will improve, but since I'm rarely on the site I waste time looking for ways to report an email safe/unsafe. I clearly have to do this reporting before* releasing/deleting an email because then the email will no longer be in the quarantine system to reference. However, once I give up looking, select all the legit emails and then click release - only then is there a pop-up sidebar which includes a "Report message as having no threats" checkbox as a final step of the release process. This is counterintuitive (reference * above).
When looking at the Review > Quarantine window, before choosing an action there should be clear UI options for "mark safe and release" and "report and delete".