https://jeffric.com/microsoft-autodiscover-abused-to-collect-web-requests-credentials/20104/microsoft-autodiscover-abused-to-collect-web-requests-credentials-2/