Thank you very much for your explanation.
We made a lot of Regular Expression / E-Mail in the "Who" object rule.
For now the fight against O365 Spam looks like the hardest.
"What" Object rule is nearly default configuration of PMG.
Did anybody of you mastered the O365 Spam?
May you have any...