Defender-MessagePostDeliveryEvents

ActionType	Title	Sample	Rule
Malware ZAP	Malware ZAP	N	N
Manual Remediation	Manual remediation	N	N
Phish ZAP	Phish ZAP	N	N
Spam ZAP	Spam ZAP	N	N

Malware ZAP

Table: MessagePostDeliveryEvents

Manual Remediation: Manual remediation

Table: MessagePostDeliveryEvents

Phish ZAP

Table: MessagePostDeliveryEvents

Spam ZAP

Table: MessagePostDeliveryEvents

any: Message post-delivery activity

Scope grouping: This repository-authored catalog entry represents a broad attribution scope, not a distinct emitted event or operation. Any sample below is a representative record from that scope; attached rules, if any, are listed separately.

Table: MessagePostDeliveryEvents

References #

Microsoft Defender XDR: advanced hunting reference