Microsoft Defender for Office 365: New filter option for messages blocked due to file type block
We are introducing a new filter for the ‘Quarantine Reason’ in the Quarantine page (Email). As part of this release, the SecOps can now apply this filter to display only the emails which are blocked when file extension/type of one or more of the attachments matches those configured in the common attachment filter in the Anti-malware policy. Currently these emails are shown under the ‘Malware’ as the Quarantine Reason.
Expected Release Date:
June CY2023
Link to Microsoft release information