I implemented a cautionary External Email Banner to Office 365 a while back -- Prepended Subject Line with "External Email" along with appending message with Cautionary note indicating the email originated outside organization. I chose appending so that Outlook users would still be able to utilize their email preview view.
Problem is that messaging gets lost in email body.
In looking at the different rule options I found the option
Apply this rule if "The message" "Character set name includes any of these words" see image below:
Appears that you can do the same for both the Subject or Body.
I am looking to use this filtering option to prepend email message with in your face yellow highlighted prepend cautionary note - If subject or body contains the following: Change Password, Update Password, Account, Identify, Confirm, Suspended, etc
Looking for feedback from the Experts on this thought. Good, Bad, Other.
What key words should i be looking for? What verbiage should I use on the cautionary note? Of course it goes without saying that we do have cyber training in place along with periodic reminders and knowbe4 type of analytics.