How can we list mails in a O365 quarantine using graph api

Question

Hi,

We have one use case where we would like to use graph apis to get the following-

1. List mails in the MS quarantine (Eg: https://security.microsoft.com/quarantine?viewid=Email&tid=455456b4-76b5-42bf-aeaf-a562b7956701)
2. We would like to get all the metadata/related fields related to a quarantined mail.

Went through graph api documentations, but nothing talks about this support.

Seeking your pointers regarding this.

Answer 1

There is no direct way to get this data via the Graph, instead you should use Exchange Online PowerShell and the Get-QuarantineMessage cmdlet.

I suppose you can create something similar via the Advanced Hunting endpoint under /security: https://learn.microsoft.com/en-us/graph/api/security-security-runhuntingquery?view=graph-rest-beta&tabs=http