My company is using phishing simulations from a company that puts their company name in the x headers or every email, so that’s also easy filter. As a bonus, that filter also throws all the full security training courses to junk