PAP Volume Analysis (Pre- vs. Post-Enablement)

Detect the email delivery delta, comparing before and after the Priority Account Protection Enablement date.

Microsoft Sentinel (KQL)