Microsoft Defender
      Back to home
      1. Sittadel Knowledge Base
      2. Management Guides
      3. Microsoft Defender

      Defender for Email Download Message Action

      This guide will show an administrator how to download a desired quarantined email.

      Role Requirements

      Procedure Scope: Administrators

      Required Group Membership: Admin.Security

      Handbook Reference

      Package: TBD

      Domain: TBD

      Modifies: TBD

      Defender for Email Download Message Action

      1. Open a desired quarantined email, locate, and select the three dots followed by selecting the Download message action.
      2. In the Download file flyout that opens, enter the following information:
        • Reason for downloading file: Enter descriptive text.
        • Create password and Confirm password: Enter a password that's required to open the downloaded message file.
        • When you're finished on the Download file flyout, select Download.
      3. When the download is ready, a Save As dialog opens for you to view or change the downloaded filename and location. By default, the .eml message file is saved in a compressed file named Quarantined Messages.zip in your Downloads folder. If the .zip file already exists, a number is appended to the filename (for example, Quarantined Messages(1).zip). 
      4. Accept or change the downloaded file details, and then select Save. Back on the Download file flyout, select Done.

      Need Assistance?

      Reach out to your Customer Success Manager to discuss how a Sittadel cybersecurity analyst can assist in managing these tasks for you. New to our services? Inquire about arranging a consultation to explore optimizing your Azure environment for painless management.