MDOP2-IR

1.0.1

Emergency phishing remediation for Microsoft 365 admins. Finds mail with message trace, locates every copy with Microsoft Graph and moves it to the Inbox, Archive, Junk, Deleted Items or Recoverable Items from a local web UI. Soft delete only, with an audit log.

Minimum PowerShell version

7.4

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name MDOP2-IR -RequiredVersion 1.0.1

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

Install-PSResource -Name MDOP2-IR -Version 1.0.1

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

(c) 2026 Krekel81. MIT License.

Package Details

Author(s)

  • Krekel81

Tags

Microsoft365 ExchangeOnline Phishing IncidentResponse Defender Security MSP

Functions

Invoke-MDOP2IncidentResponse

PSEditions

Core

Dependencies

FileList

Version History

Version Downloads Last updated
1.3.1 8 11/12/2026
1.0.1 (current version) 9 11/11/2026
1.0.0 8 11/11/2026