Spam and Phish allowed to inbox by User Overrides

Azure Sentinel@AzureSentinel

updated Jun 27, 20250114

This query helps in reviewing malicious emails allowed due to user overrides

Microsoft Sentinel (KQL)