Exchange Online Protection built-in security
Timelines and exceptionsTimeline
From the capture of 12 Oct 23:53 UTC- 4 undated sections
- 4 with conditions
Requirements, exceptions and scope
If malware is found in the message or a message attachment, the message is delivered to quarantine. By default, only admins can view and interact…
Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.
Observed history and review priority
Captured 12 Oct 23:53 UTC; extracted 16 Oct 16:10 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c.
Review priority. Extracted assertions require review · Applicability or exceptions require review
0 date changes and 0 condition changes across 0 compared revisions. Suggested check interval: 24 hours.
Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.
Retained observations · 2
Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.
- 12 Oct 23:53 UTC · 5 candidates
- 8 Oct 23:13 UTC · 8 candidates