Defender-MessagePostDeliveryEvents

ActionType	Title	Sample	Rule
any	Message post-delivery activity	N	N
Malware ZAP	Malware ZAP	N	N
Manual Remediation	Manual remediation	N	N
Phish ZAP	Phish ZAP	N	N
Spam ZAP	Spam ZAP	N	N

any: Message post-delivery activity

Table: MessagePostDeliveryEvents

Malware ZAP

Table: MessagePostDeliveryEvents

Manual Remediation: Manual remediation

Table: MessagePostDeliveryEvents

Phish ZAP

Table: MessagePostDeliveryEvents

Spam ZAP

Table: MessagePostDeliveryEvents

References #

Microsoft Defender XDR: advanced hunting reference