MQL Rules

There are two types of Message Query Language (MQL) rules in Sublime:

• Detection Rules run on live email flow and are used for phishing detection, DLP, and policy enforcement.
• Automations run on flagged messages and/or user reported messages, and are used for automatic triage and remediation.