This "HEUR:Trojan.Script.Generic" is found on some of our devices

[Henrik Jensen]

In the report from KEC 14.2, we see that it is linked to a 365-mail, but just the ID of the 365 account.

https://outlook.office365.com/mapi/emsmdb/?MailboxId=*****@*****.tld

How do I find the spicefic email(s) containing this script ?

Br.

[JL - KL DACH]

Hello Henrik,

as we just can get the mailbox ID from Office365 you maybe can check it by running a powershell command to find what mailbox name is behind it.

You can try 

Get-Mailbox -Identity "<MailboxIdentity" | Select-Object *

Make sure latest Endpoint Version and its Database Updates are applied.

If the problem still happen open a ticket with support

Thank you in advance

Best Regards