Report on the number of blocked emails

[dmarquesgn]

Hi,

I need to generate a report on the ammount of emails which are getting blocked automatically by Microsoft, based on their categories, like Malware, Phishing, etc, so after I can make a report on the number of emails which are analyzed by humans.

I'm trying to understand where can I extract this information. On the Microsoft 365 Defender portal, on "Email & Collaboration", I've got the "Review" and then "Quarantine" tab, which shows quarantined emails based on the categories, but here I cannot extract a report nowhere.

Then I've got the "Exlorer" tab, in which I can select for example the "Delivery Action": "Delivered to junk" and "Blocked" and I got a number for last 30 days of blocked emails.

Is this the best approach to reach this goal?
Thanks

[#2 · Accepted solution]

Have you looked at the Threat detection status reports?

https://security.microsoft.com/reports/TPSEmailMalwareReportATP

More info on these reports can be found here:
https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/reports-email-security?...

[#3]

@Robert Young 

Hi, thanks for the references, which was something that I was not very familiar with.

I've read those and then I got a couple of questions based on the data I extracted from those reports, which I've opened on this thread.

https://techcommunity.microsoft.com/t5/exchange/defender-mail-flow-status-report-vs-exchange-inbound...

Thanks

[#4]

Check out our latest blog on quarantined messages report through PowerShell. Generated reports facilitates you with the kind of information like  quarantined emails categorized on date range, quarantined emails from a specific user and many more. Know more about the quarantined messages and how to generate these reports from here.

https://o365reports.com/2023/04/06/export-quarantined-messages-report-in-exchange-online-using-power...