March 31, 2025, 5:28 a.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/owa/auth/logon.aspx)
Pattern: /owa/auth/logon.aspx

March 31, 2025, 5:28 a.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/owa/auth/logon.aspx)
Pattern: /owa/auth/logon.aspx

March 31, 2025, 5:28 a.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/owa/auth/logon.aspx)
Pattern: /owa/auth/logon.aspx

March 31, 2025, 5:28 a.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/owa/auth/logon.aspx)
Pattern: /owa/auth/logon.aspx

March 30, 2025, 5:42 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application)
Pattern: /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application

March 30, 2025, 5:42 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application)
Pattern: /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application

March 30, 2025, 5:42 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application)
Pattern: /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application