Delete an email using a playbook from MS 365

Hi,

I've not seen any playbooks around for this, and I've seen people having issues creating them as the entity for mail related alerts is the network message ID of the mail.

It's worth while implementing the report phishing add-in and training your users up, this way you can make use of Defender for Office 365 P2 (if you have it) and the automated investigation and response capabilities as user reports will trigger them. A few links below verifying this:

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/air-about?view=o365-worldwide#which-alert-policies-trigger-automated-investigations

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/air-about-office?view=o365-worldwide#example-a-user-reported-phish-message-launches-an-investigation-playbook

Hope this helps a little