How can I filter by email header?

I get a lot of out-of-office tickets currently, they all have in common that they have the X-Auto-Response-Suppress: all header on them.

Is it possible to suppress emails with this header?

I also saw one X-Auto-Response-Suppress: -3

This is outside the capability of osTicket Filters at this time.

If you use something like M365 you could probably do something with this with Rules.