Typosquatted Email Received
Purpose: The query is designed to detect and alert on emails received from typosquatted domains, which are domains that closely mimic legitimate domains by having slight variations, often used in phishing attacks.
Microsoft Sentinel (KQL)

