Your inbox should receive quarantine email summaries daily for any new blocked emails.
Please review these emails as they arrive. See below for Email Review and Verification recommendations.
End users who have been granted access to shared mailboxes are also able to triage quarantine contents of those shared mailboxes through the quarantine notification and directly from the quarantine portal, https://security.microsoft.com/quarantine.
To avoid missing emails from our clientele please get in the habit of reviewing these emails daily at the URL mentioned above.
When using the recipient address filter, users with access to shared mailboxes can use the filter to look up quarantine items for the shared mailboxes.
Email Review and Verification
Treat all incoming email under quarantine as malicious
Delete obvious malicious emails
Review in the portal the remaining emails by contacting the sender using a known contact method sourced from outside the email. This part is important since if the email is malicious, the contact info may also be malicious. When still in doubt contact email@example.com.