KQL Search

Query Details

HomeAI ToolsDevice Query

Visualization Email Post Delivery Events

Query

# Post Dilivery Events

## Query Information

#### Description
This query visualizes the post dilivery events from exchange to view the status of your environment.

#### References
- https://learn.microsoft.com/en-us/microsoft-365/security/defender/advanced-hunting-emailpostdeliveryevents-table?view=o365-worldwide

## Defender For Endpoint
```KQL
EmailPostDeliveryEvents
| summarize TotalEvents = count() by Action
| render piechart with(title="Post Delivery Events")
```
## Sentinel
```KQL
EmailPostDeliveryEvents
| summarize TotalEvents = count() by Action
| render piechart with(title="Post Delivery Events")
```

Explanation

This query shows the post-delivery events from Exchange to see the status of your environment. It counts the total events by action and visualizes them in a pie chart titled "Post Delivery Events."

Details

Bert-Jan Pals profile picture

Bert-Jan Pals

Released: July 16, 2024

Tables

EmailPostDeliveryEvents

Keywords

EmailPostDeliveryEvents,Action,TotalEvents

Operators

summarizecountbyrender

Actions