Mass Delete Emails (Phishing/Spam etc.) Find and Take Action on Emails https://security.microsoft.com/threatexplorerv3?viewid=AllEmail ( Email & Collaboration > Explorer in the side menu) Create a search query I like to always add Receipt domain equals none of the domains: mas.barracudanetworks.com as it will fail since it's our archiver and not a 365 mailbox. Add other queries to help narrow down your search Select your emails and click Take Action Now Specify what you want to do. Depending on the severity, you may want to hard delete so they're unrecoverable. Give the job a name. Doesn't matter what it is, just so you recognize it. Submit the job and let it do its thing. Can take awhile depending on how many emails View Submitted Job Status https://security.microsoft.com/ Investigation & Response > Actions & Submissions > Submissions Depending if the job is completed you may need to click the history tab (red box in screenshot below)
