This detection generates alerts for multitenant cloud apps with EWS software permissions exhibiting a major increase in calls into the Trade World-wide-web Providers API which can be specific to electronic mail enumeration and selection. This application could be linked to accessing and retrieving sensitive e mail facts.Encouraged Motion: Classify