April 27, 2025, 8:03 a.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/owa/auth/logon.aspx)
Pattern: /owa/auth/logon.aspx

April 27, 2025, 8:03 a.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/owa/auth/logon.aspx)
Pattern: /owa/auth/logon.aspx

April 27, 2025, 8:03 a.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/owa/auth/logon.aspx)
Pattern: /owa/auth/logon.aspx

April 27, 2025, 8:03 a.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/owa/auth/errorFE.aspx?httpCode=500)
Pattern: /owa/auth/errorFE.aspx?httpCode=500

April 27, 2025, 8:03 a.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/owa/auth/errorFE.aspx?httpCode=500)
Pattern: /owa/auth/errorFE.aspx?httpCode=500

April 27, 2025, 8:03 a.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application)
Pattern: /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application

April 27, 2025, 8:03 a.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/owa/auth/errorFE.aspx?httpCode=500)
Pattern: /owa/auth/errorFE.aspx?httpCode=500

April 27, 2025, 8:03 a.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application)
Pattern: /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application

April 27, 2025, 8:03 a.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application)
Pattern: /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application