Advanced hunting on email threats

[Deleted]

Hello to all M365 Defender gurus out there.

Disclaimer: I am new to M365 Defender and my question may be obvious for the seasoned professional.

Situation: I am using M365 Defender's Advanced hunting feature and have created a query that focuses on the identification of specific phishing emails.  The emails are in an M365 Exchange environment. The query works and returns results as expected.

Challenge:

1. The results table does not allow me to perform a "select all" rows, so I have manually place a "check mark" next to each record.  Is that normal?
2. When I select one or multiple email records that were returned by the query, the "take actions" options only display "Devices" and "Files". No email. The emails are in an M365 Exchange environment.  Why are there no "email" actions available? Is that normal?

Goal:

I would like to utilize the custom query (see below) to identify emails of interest.  Once confirmed the results are indeed malicious/unwanted emails, I would like to trigger a "remediation" action against all email records returned directly within the "Advanced Hunting" screen using the "take actions" feature.  The desired "remediation" would be to delete the emails from the user's mailboxes.

Question:

1. Can the goal outlined above be accomplished via the "Advanced hunting" feature in M365 Defender? If so, what am I currently doing wrong?

Modified version of the custom query:

EmailEvents 
| project Timestamp, Subject, SenderFromDomain, EmailAction, AttachmentCount, EmailDirection, DeliveryLocation
| where (Subject contains "(ABC001)")
| limit 100 
| order by Timestamp