Post Dilivery Events
Visualization Email Post Delivery Events
Query
EmailPostDeliveryEvents
| summarize TotalEvents = count() by Action
| render piechart with(title="Post Delivery Events")About this query
Post Dilivery Events
Query Information
Description
This query visualizes the post dilivery events from exchange to view the status of your environment.
References
Defender XDR
Sentinel
EmailPostDeliveryEvents
| summarize TotalEvents = count() by Action
| render piechart with(title="Post Delivery Events")
Explanation
This query is designed to analyze and visualize email events that occur after an email has been delivered, using data from Microsoft Exchange. It focuses on categorizing these events based on the actions taken, such as marking an email as spam or moving it to a different folder. The query counts the number of each type of action and then displays this information in a pie chart, providing a clear visual representation of the distribution of post-delivery actions in your email environment. This can help you understand the status and security of your email system by showing how emails are being handled after delivery.
Details

Bert-Jan Pals
Released: October 20, 2024
Tables
Keywords
Operators