Total Emails with Admin Overrides (Block)
This query visualises the amount of emails subject to an admin policy with action of block, summarizing the data daily
Microsoft Sentinel (KQL)

This query visualises the amount of emails subject to an admin policy with action of block, summarizing the data daily

Already have an account?