Your Organization requires a detail report about who released an email from the Quarantine and when the action has been performed.
Email Security.cloud
In order to generate an audit report for the quarantine released emails , Administrators are advised to go to :
1 - Reports > Report Requests
2 - Select > Email Detailed Report with both options If needed as shown in the below screenshot :
Note : The detailed audit report is limited to 30days and the result will contain the action performed by the user who performed the release action which is available in the Action User Tab.