Examples Exchange_SSRF

DateTime RequestId MajorVersion MinorVersion BuildVersion RevisionVersion Ring ClientRequestId AuthenticationType IsAuthenticated AuthenticatedUser Organization UserAgent VersionInfo ClientIpAddress ServerHostName FrontEndServer SoapAction HttpStatus RequestSize ResponseSize ErrorCode ImpersonatedUser ProxyAsUser ActAsUser Cookie CorrelationGuid PrimaryOrProxyServer TaskType RemoteBackendCount LocalMailboxCount RemoteMailboxCount LocalIdCount RemoteIdCount BeginBudgetConnections EndBudgetConnections BeginBudgetHangingConnections EndBudgetHangingConnections BeginBudgetAD EndBudgetAD BeginBudgetCAS EndBudgetCAS BeginBudgetRPC EndBudgetRPC BeginBudgetFindCount EndBudgetFindCount BeginBudgetSubscriptions EndBudgetSubscriptions MDBResource MDBHealth MDBHistoricalLoad ThrottlingPolicy ThrottlingDelay ThrottlingRequestType TotalDCRequestCount TotalDCRequestLatency TotalMBXRequestCount TotalMBXRequestLatency RecipientLookupLatency ExchangePrincipalLatency HttpPipelineLatency CheckAccessCoreLatency AuthModuleLatency CallContextInitLatency PreExecutionLatency CoreExecutionLatency TotalRequestTime DetailedExchangePrincipalLatency ClientStatistics GenericInfo AuthenticationErrors GenericErrors Puid StartTime ProcessId TimeInGC StartTotalMemory EndTotalMemory StartGCCounts EndGCCounts TokenBasedThrottlingPolicy BudgetKey CoinsCharged CoinsChargedMethod SidBudgetInfo AppBudgetInfo TenantBudgetInfo ResourceAccessed ResourceHealthBasedThreshold ThrottledBy BackoffHint WorkClassification

datetime01 3fcd25be-51ca-45a0-bd12-b221d6ee335e 15 2 792 3 Unknown Negotiate true NT AUTHORITY\СИСТЕМА company01 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/92.0.4515.131 Safari/537.36. Target=None;Req=Exchange2016/Exchange2016; 31.170.22.6 EX01 EX01.company01 GetItem 200 1349 user01@company01.com user01@company01.com 2ac166417ec948cf8ed07c2a5cacca84 9b810931-9fcd-497e-b105-445a7ee6c770 PrimaryServer ProxyTask 1 0 1 0 1 [C P(https://ex02.company01:444/ews/exchange.asmx)] 0 0 0 0 16 0 3 26 98 SKU=Unknown;App_BeginReq_Start=0;App_BeginReq_End=0;GetHandler_Start=13;RequestHandler=Wcf;GetHandler_End=14;TotalBERehydrationModuleLatency=0;CSCWILatency=0;CSCWILatency=0;CSCMissLatency=0;MbxGuidForProxyEval=201621ea-b407-4f3a-800f-cf6cf65d82da;KerbAuthLatency=0;cpn=RUM_ABR/RUM_ABRC/ABR/APAR/APSRH/APRHE/RUM_AER/RUM_AERC/AER/AERC/;cpv=0/0/0/13/95/98/99/99/99/99/;MailboxTypeCacheSize=0;S:AspDispatchLatency.BeginRequest=0;S:ADRS.InclI=1;S:AspDispatchLatency.EndRequest=0;S:ADRS.Check=00;S:WLM.Bal=300000;S:ServiceTaskMetadata.ServiceCommandBegin=27;S:ServiceTaskMetadata.ServiceCommandEnd=32;S:ActivityStandardMetadata.Component=Ews;S:WLM.BT=Ews;S:EwsMetadata.HttpHandlerGetterLatency=0;Dbl:WLM.TS=98;Dbl:BudgUse.T[]=4.34639978408813;I32:ADR.C[DC00]=1;F:ADR.AL[DC00]=1.4849;I32:ADS.C[DC00]=3;F:ADS.AL[DC00]=2.5225;Dbl:CCpu.T[CMD]=0;I32:ATE.C[DC00.company01]=1;F:ATE.AL[DC00.company01]=0 datetime01 11152 218023168 222475904 3517_519_248 3517_519_248

datetime02 ea2ef86f-1738-41d9-893a-3a68a0de10a2 15 1 2176 9 Unknown Negotiate true NT AUTHORITY\SYSTEM company02 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/92.0.4515.131 Safari/537.36. Target=None;Req=Exchange2016/Exchange2016; 31.170.22.26 EX02 EX02.company02 GetItem 200 1349 user02@company02.com user02@company02.com d21778c6b2e556f39e94b429158ed33b ae5cb7be-74fb-4768-9437-e594c058d1de PrimaryServer LocalTask 0 1 0 1 0 [C] 0 0 3 15 7 0 5 20 22 48 SKU=Unknown;App_BeginReq_Start=0;App_BeginReq_End=0;GetHandler_Start=4;RequestHandler=Wcf;GetHandler_End=6;TotalBERehydrationModuleLatency=0;CSCWILatency=0;CSCWILatency=0;CSCMissLatency=0;cpn=RUM_ABR/RUM_ABRC/ABR/APAR/EWS_CE/EWS_CEC/APSRH/APRHE/RUM_AER/RUM_AERC/AER/AERC/;cpv=0/0/0/4/22/44/45/47/47/47/47/47/;MailboxTypeCacheSize=131128;S:AspDispatchLatency.BeginRequest=0;S:ADRS.InclI=1;S:AspDispatchLatency.EndRequest=0;S:ADRS.Check=00;S:ServiceTaskMetadata.WatsonReportCount=0;S:WLM.Bal=299990;S:ServiceTaskMetadata.ServiceCommandBegin=21;S:ServiceTaskMetadata.ServiceCommandEnd=44;S:ActivityStandardMetadata.Component=Ews;S:WLM.BT=Ews;S:EwsMetadata.ParticipantResolveLatency=0;S:EwsMetadata.HttpHandlerGetterLatency=1;Dbl:WLM.TS=48;Dbl:EXR.T[EX02.8d98a859-f255-4963-9256-edaff6259192]=16;Dbl:RPC.T[EX02.a8ed9b73-dc5d-4533-a440-e01663c08d62]=18;I32:RPC.C[EX02.a81ef061-581f-4af4-bc3b-0b5ba2f333ba]=3;I32:MAPI.C[EX02.62cd9f8d-6f0c-4eb4-9f55-db0e5b830b14]=5;I32:ROP.C[EX02.1166f3e4-20d5-4bc5-8330-7a5f468653e5]=-1939611602;Dbl:CCpu.T[CMD]=0;I32:ATE.C[DC03.company02]=1;F:ATE.AL[DC03.company02]=0;I32:ADR.C[DC03]=1;F:ADR.AL[DC03]=2.935195;Dbl:ST.T[EX02.1166f3e4-20d5-4bc5-8330-7a5f468653e5]=9;I32:MB.C[EX02.1166f3e4-20d5-4bc5-8330-7a5f468653e5]=3;F:MB.AL[EX02.1166f3e4-20d5-4bc5-8330-7a5f468653e5]=6;Dbl:MAPI.T[EX02.1166f3e4-20d5-4bc5-8330-7a5f468653e5]=18;I32:RPCDB.C[EX02.1166f3e4-20d5-4bc5-8330-7a5f468653e5]=3;F:RPCDB.AL[EX02.1166f3e4-20d5-4bc5-8330-7a5f468653e5]=1;Dbl:BudgUse.T[]=22.9992008209229;I32:RPCSVR.C[EX02.1166f3e4-20d5-4bc5-8330-7a5f468653e5]=3;F:RPCSVR.AL[EX02.1166f3e4-20d5-4bc5-8330-7a5f468653e5]=1 datetime02 7512 395724840 397015448 301042_76048_6914 301042_76048_6914