I stopped the message. Now what?

Quarantined email messages in Exchange Online Protection (EOP) and Defender for Office 365 as well as quarantined Teams messages represent a proactive measure to shield organizations from common attack vectors originating from both external attackers and malicious insiders. By default, Defender for Office 365 scans all incoming messages for signs of spam, phishing attempts, or policy infractions. Any message flagged by these security measures is diverted into quarantine—a special holding area outside users’ primary inboxes or Teams chats, where they can’t cause harm or provoke action from unsuspecting recipients.

Identifying quarantined email messages

Administrators play a key role in managing quarantined messages. They receive notifications or use security dashboards within the Microsoft 365 Defender portal to oversee quarantined items. For individual users, depending on the organization’s policies, they might receive...