This guide will show an administrator how to copy and view the message headers for a desired quarantined email.
Role Requirements
Procedure Scope: Administrators
Required Group Membership: Admin.Security
Handbook Reference
Package: TBD
Domain: TBD
Modifies: TBD
Defender for Email View Message Headers Action
- Open a desired quarantined email, locate, and select the three dots followed by selecting the View message headers action.
- In the Message header flyout that opens, the message header (all header fields) is shown. Use Copy message header to copy the message header to the clipboard. You can Select the Microsoft Message Header Analyzer link to analyze the header fields and values in depth.
- Upon selecting the Microsoft Message Header Analyzer link, a redirect will occur, paste the message header into the Insert the message header you would like to analyze section and then select Analyze headers. Once the analysis has been conducted, a report will be generated below that will house all the necessary information.
Need Assistance?
Reach out to your Customer Success Manager to discuss how a Sittadel cybersecurity analyst can assist in managing these tasks for you. New to our services? Inquire about arranging a consultation to explore optimizing your Azure environment for painless management.