Updated January 30, 2024: We have updated the content below for clarity. Thank you for your feedback. Microsoft will stop honoring the mail flow rule which helps you track end user reporting. To improve the availability and reduce the latency of the submission service so that you can respond to threats (false negatives) more quickly and efficiently, we moved the submission service ahead of the exchange transport rule agent. Now the mail flow rules (or exchange transport rules) which you have for...
Applies to: Exchange Online · Microsoft Defender XDR
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).