Use the Get-QuarantineMessage cmdlet to view quarantined messages and files in your cloud-based organization. Files are quarantined by Safe Attachments for SharePoint, OneDrive, and Microsoft Teams, For examples:
Get-QuarantineMessage -StartReceivedDate 12/22/2020
Get-QuarantineMessage -StartReceivedDate 12/22/2020 -EndReceivedDate 12/31/2020
Get-QuarantineMessage -QuarantineTypes SPOMalware | Format-List
More information can be found here :
Get-QuarantineMessage (ExchangePowerShell) | Microsoft Docs
Use the Get-MessageTrace cmdlet to trace messages as they pass through the cloud-based organization.
Get-MessageTrace -SenderAddress john@contoso.com -StartDate 12/22/2020 -EndDate 12/31/2020
More information can be found here :
Get-MessageTrace (ExchangePowerShell) | Microsoft Docs