April 23, 2025, 7 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/autodiscover/autodiscover.json?@zdi/Powershell)
Pattern: /autodiscover/autodiscover.json?@zdi/Powershell

April 23, 2025, 7 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/autodiscover/autodiscover.json?@zdi/Powershell)
Pattern: /autodiscover/autodiscover.json?@zdi/Powershell

April 23, 2025, 7 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/autodiscover/autodiscover.json?@zdi/Powershell)
Pattern: /autodiscover/autodiscover.json?@zdi/Powershell