How to consistently differentiate Microsoft service notification emails from normal user emails?

I receive a large number of notification mails from Microsoft services (SharePoint, Teams, etc.) and they clutter my mailbox. I’ve tried:

Inbox rules filtering by sender (e.g., email address removed for privacy reasons) → doesn’t work since Microsoft uses many changing domains.

Filtering by Microsoft IP ranges → some internal org mails also get caught.

Filtering by domains from Microsoft endpoint list → works, but the list updates monthly, so not reliable.

Question: Is there a consistent way (e.g., via Internet message headers or any other property) to reliably identify Microsoft-generated notification emails vs normal user emails?