April 2, 2025, 12:03 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application)
Pattern: /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application

April 2, 2025, 12:03 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application)
Pattern: /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application

April 2, 2025, 12:03 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application)
Pattern: /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application

March 29, 2025, 1:41 a.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/owa/auth/x.js)
Pattern: /owa/auth/x.js

March 29, 2025, 1:41 a.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/owa/auth/x.js)
Pattern: /owa/auth/x.js

March 29, 2025, 1:41 a.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/owa/auth/x.js)
Pattern: /owa/auth/x.js

March 24, 2025, 11:39 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/owa/auth/x.js)
Pattern: /owa/auth/x.js

March 24, 2025, 11:39 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/owa/auth/x.js)
Pattern: /owa/auth/x.js

March 24, 2025, 11:39 p.m.
Annotator: Never200Annotator
Label: Golden Annotation: Suspicious resource access (/owa/auth/x.js)
Pattern: /owa/auth/x.js