Total Emails with User Overrides (Block)
This query visualises the amount of emails subject to a user type policy with action of block, summarizing the data daily
Microsoft Sentinel (KQL)

This query visualises the amount of emails subject to a user type policy with action of block, summarizing the data daily

Already have an account?