For on-premises users that mechanically forward from their on-premises e-mail program via Microsoft 365, you have to produce a mail stream rule to trace these people. For basic Guidance on how to create a mail move rule, see Utilize the EAC to produce a mail stream rule.Spoof intelligence Perception: Evaluation detected spoofed messages from sender