Regex pattern matches any character that is not an ASCII character
EmailEvents| where Subject matchesregex@"[^\x00-\x7F]"| project RecipientEmailAddress, Subject, EmailAction
Finding Chinese character
EmailEvents| where Subject matchesregex@"[\u4E00-\u9FFF]"| project Timestamp, RecipientEmailAddress, Subject, SenderFromAddress
Finding Spanish character
EmailEvents| where Subject matchesregex@"[áéíóúüñÁÉÍÓÚÜÑ]"| project Timestamp, RecipientEmailAddress, Subject, SenderFromAddress
All Languages that are not English
EmailEvents| whereisnull(EmailLanguage) or EmailLanguage != "en"// Include emails with no language specified or not in English| orderby EmailLanguage asc// Sort by language in ascending order| project RecipientEmailAddress, Subject, SenderFromAddress, EmailLanguage
Finding attachments sent from Gmail
EmailAttachmentInfo| where SenderFromAddress contains"gmail"| project RecipientEmailAddress, SenderFromAddress, FileName
Finding attachments that are PDF sent from Gmail with a certain size
EmailAttachmentInfo| where FileType has"pdf"| where SenderFromAddress contains"gmail"| where FileSize > 40000and FileSize < 50000| extend FileSizeKB = FileSize / 1024.0| project RecipientEmailAddress, SenderFromAddress, FileName, FileSize, FileSizeKB