[FR] Add Microsoft 365 Defender responder for Tenant Allow/Block List

[joeslazaro-cdw]

Feature description
The Tenant Allow/Block List in the Microsoft 365 Defender portal gives you a way to manually override the Microsoft 365 filtering verdicts. The Tenant Allow/Block List is used during mail flow for incoming messages (does not apply to intra-org messages) and at the time of user clicks.

Describe the solution you'd like
I am developing a responder and will submit a pull request for it.

Additional context
https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/exchange-online-protection-overview?view=o365-worldwide