Check the current retention time: https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/quarantine-about?view=o365-worldwide#quarantine-retention IF these are high confidence phish, trying using explorer to find it instead: https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/threat-explorer-views?view=o365-worldwide#all-email
365 mail quarantine - How many days are they kept?

Joe Grover
566
Reputation points
I have a user that's looking for an email that was sent to him on Friday that likely got caught in the 365 Quarantine (due to high confidence phish). It's currently Monday morning, but if I look at the Quarantine I'm only seeing back to Saturday afternoon.
I'd thought the the Quarantine items were there for anywhere from 14 to 30 days, but no matter what filter I use I'm only seeing back to Saturday.
Is there a way to see the items that would have been quarantined on 2/2?
Exchange Online
Exchange Online
A Microsoft email and calendaring hosted service.
6,182 questions
Accepted answer
-
Andy David - MVP 157.8K Reputation points MVP Volunteer Moderator
2024-02-05T16:42:19.43+00:00