I have noticed something over the past several weeks that I have been meaning to investigate and I am hopeful someone can point me to the cause or a hint.
We use Outlook and I have noticed that on some tickets that are open the notification is flagged by MS as potential spoofing. I know this is not the case. It appears to be assocaited with any user that has their Full Name = to their email, which is another issue that I'm trying to figure out. I do not see this if they Full Name = first name last name, e.g. Jack Brickey. I am thinking that this may be related to the recent changes in login authentication.
The email come in with the following header displayed
