March 28, 2025, 5:44 a.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application)
Pattern: /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application

March 28, 2025, 5:44 a.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application)
Pattern: /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application