("cs-method":POST "sc-status":200 ("c-uri":\/owa\/* "c-uri":\/powershell*) ("c-uri":@* OR "c-uri":%40*)) (-("c-useragent":ClientInfo OR "c-useragent":Microsoft\ WinRM\ Client OR "c-useragent":Exchange\ BackEnd\ Probes))