Uptick in M365 Defender Quarantine Release Requests
Over this weekend, I've seen a significant uptick in quarantine release requests. Initially I thought maybe there was an issue on Microsoft's end that caused a delay in those notification emails and they all came through at once on a Saturday. Tonight, however, I received quite a few more and some of them are from accounts that I know didn't make the requests. For example, one of them is from a no-reply shared mailbox that only one person has access to. I checked with that person and he said he didn't make the request.
I'm just curious, for those of you who use M365 Defender for email gateway security, if anyone else seeing something similar or if it's just something in my tenant?
Posted Nov 14, 2022, 4:23 AM UTC