March 26, 2025, 7:10 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/owa/auth/logon.aspx)
Pattern: /owa/auth/logon.aspx