I haven't used GRAPH before, can you offer pointer?
The problem with the "since last run" is not having a "date moved to deleted folder" to use. Let me explain. The user has reason to believe that others who have access may be accdently (or on purpose) deleting emails. So a an email arriving Monday morning, e.g.., might be deleted on Wednesday afternoon but the email date field to use is date received.
If the flow ran say Tuesday night, the email that will be deleted is not in the folder. When the email is deleted the next day and the flow subsequently runs, the received date would be back to Monday and out of scope from the last flow run of Tuesday.
Still, if I can grab enough emails and can check them against a white list, it makes no difference when they got deleted unless it was an ancient email.
thanks for your response.