Acessing and using the Office 365 Quarantine

Microsoft has recently rolled out more enforced usage of the Office 365 quarantine for phishing, spam, and bulk messages. This is enabled by default under "Security Defaults" on the tenant.

Users can access the quarantine of their mailbox, and any mailboxes they have access to at:

https://security.microsoft.com/quarantine

We have found that the "Search" function is not very effective, but the "Filters" are.

For instance if you were searching for a message from someone at Inspired, you could filter the sender as "inspired.co" and it would show any message being held from our domain.

If you have access to a secondary mailbox, filtering by that email as the recipient is an effective way to find messages.

When clicking a message, you can preview the message, or release the email to your inbox. Make sure to only release messages that you're expecting from known senders, do not release messages that may be malicious or spam, as the system is meant to learn from your actions.

More details here: https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/quarantine-end-user?view=o365-worldwide