This detection generates alerts for multitenant cloud apps with EWS application permissions displaying a substantial rise in phone calls to the Exchange World-wide-web Expert services API which have been particular to e mail enumeration and assortment. This app may very well be associated with accessing and retrieving sensitive electronic mail info