M365 Changelog: (Updated) Microsoft Defender for Office 365: New Quarantine release details

Summary

Microsoft Defender for Office 365 is rolling out new details on who or what is responsible for releasing a message from quarantine. The Release by field will be propagated with the email address of the user or admin responsible for the release. This will be available in the email summary flyout panel accessible from the Quarantine page. The release will be captured by the system. Admins should update their training documentation. The rollout will begin in late March 2024 and complete by mid-June 2024.

MC744113 – Updated May 8, 2024: Microsoft has updated the rollout timeline below. Thank you for your patience.

In Microsoft Defender for Office 365, Microsoft is rolling out new details on who or what is responsible for releasing a message from quarantine.

These details will now be included in the email summary flyout panel accessible from the Quarantine page.

When this will happen:

General Availability (Worldwide, GCC, GCC High): Microsoft will begin rolling out late March 2024 and expects to complete by late May 2024 (previously mid-April).

DoD: Microsoft will begin rolling out mid-April 2024 and expects to complete by mid-June 2024 (previously late April).

How this will affect your organization:

After a message is released from quarantine, the Release by field will be propagated with the email address of the user or admin responsible for the release.

admin controls
View image in new tab

admin controls
View image in new tab

The Release by field will also capture releases carried out by the system:

admin controls
View image in new tab

Please note that previously this information was available only in audit logs.

What you need to do to prepare:

The purpose of this communication is for awareness. Admins should also update their training documentation as they see fit. 

Learn more: Manage quarantined messages and files as an admin | Microsoft Learn