events.data.microsoft.com
login.live.com
*.wns.windows.com
*.ecs.office.com/config/v1/MicrosoftWindowsDefenderClient 
settings-win.data.microsoft.com
*.events.data.microsoft.com
login.microsoftonline.com