Query Details

Post Dilivery Events

Visualization Email Post Delivery Events

Query

EmailPostDeliveryEvents
| summarize TotalEvents = count() by Action
| render piechart with(title="Post Delivery Events")

About this query

Post Dilivery Events

Query Information

Description

This query visualizes the post dilivery events from exchange to view the status of your environment.

References

Defender XDR

Sentinel

EmailPostDeliveryEvents
| summarize TotalEvents = count() by Action
| render piechart with(title="Post Delivery Events")

Explanation

This query is designed to analyze and visualize email events that occur after an email has been delivered, using data from Microsoft Exchange. It focuses on categorizing these events based on the actions taken, such as marking an email as spam or moving it to a different folder. The query counts the number of each type of action and then displays this information in a pie chart, providing a clear visual representation of the distribution of post-delivery actions in your email environment. This can help you understand the status and security of your email system by showing how emails are being handled after delivery.

Details

Bert-Jan Pals profile picture

Bert-Jan Pals

Released: October 20, 2024

Tables

EmailPostDeliveryEvents

Keywords

EmailPostDeliveryEvents

Operators

summarizecountbyrenderwith

Actions

GitHub