quarantine-review

What problem does it solve?

Quarantined emails can block legitimate business communication, and security teams need a reliable way to review what was held, decide what to release, and document actions without accidentally allowing malicious messages.

Core Features & Use Cases

• Review quarantined messages: Aggregates pending quarantine notifications for the helpdesk/admin mailboxes and optional scoped recipients or sender domains.
• Classify and recommend actions: Labels items as likely false positives (release), likely spam (keep), or uncertain (manager judgment) while never recommending release for high-confidence phishing or malware.
• Provide execution guidance: Supplies explicit PowerShell and Exchange Admin Center steps so the IT Manager performs releases/blocks with confirmation.

Quick Start

Ask the skill to check the last 7 days of quarantine notifications for likely false positives and provide the numbers you want to release.