Top Spoof DMARC detections by Sender domain (P1/P2)
This query visualises total emails with Spoof-DMARC fails detections summarizing the data by the top email sender P2 domain (SenderFromDomain) and sender P1 domain (SenderMailFromDomain).
Microsoft Sentinel (KQL)
