How We Finally Stopped Internal Spoofing Through Microsoft 365 Direct Send

We had a client reach out recently with a very peculiar issue after starting the journey to implementing their “email security trifecta”: