Outbound Automatic Reply Detection
This rule detects outbound automatic reply emails sent from an organization's users to external recipients. It specifically looks for emails with subjects starting with "Automatic reply:" that have been delivered and are outbound.
Microsoft Sentinel (KQL)
