MS Graph. How to get the list of user submitted (reported) emails?

Dmitriy Kolesnikov 6 Reputation points
2024-05-29T15:29:48.5166667+00:00

Hello!

I'm trying to get the list of user-submitted emails (reported as phishing or malware) by using the following request but it returns the items that were submitted to Microsoft only:

"https://graph.microsoft.com/beta/security/threatSubmission/emailThreats"

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
11,124 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Yakun Huang-MSFT 1,400 Reputation points Microsoft Vendor
    2024-05-30T02:47:43.3066667+00:00

    Hi @Dmitriy Kolesnikov

    According to the Graph Api, emailThreatSubmission is an abstract type to report suspected spam, malware or phishing emails to Microsoft Defender for Office 365. Therefore, all user-submitted emails listed using the List emailThreatSubmissions endpoints are reported to Microsoft.

    User's image

    Also, it should be noted that the endpoint you are using is a /beta version, the functionality of this version is subject to change at any time, and it is not recommended for actual production.

    User's image

    See this link for more information:

    https://learn.microsoft.com/en-us/graph/api/resources/security-emailthreatsubmission?view=graph-rest-beta

    Hope this helps.

    If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.