Hi,

I noticed that all the details in our email headers with the attribute X-MS-Exchange-Organization-Rules-Execution-History are encrypted. This didn't use to be the case because I would frequently check this attribute in the headers of quarantined emails to figure out why they were quarantined.

• Is there a way to turn off encryption for this attribute?
• If not, is there a way to decrypt the output?

This is important for troubleshooting false positives that end up in quarantine.

Thanks for any help!

-Marc