Automated SharePoint/OneDrive/Exchange discovery via bulk search enumeration

Arnold Chan@slaz

•updated Sep 12, 2026•0•0•1

Detects anomalous, high-volume search query activity across multiple SharePoint sites or OneDrive locations, potentially indicating an adversary performing broad data discovery or enumeration across an organization's cloud document repositories.