login.live.com
*.wns.windows.com
settings-win.data.microsoft.com
*.events.data.microsoft.com
login.microsoftonline.com
*.ecs.office.com/config/v1/MicrosoftWindowsDefenderClient 
events.data.microsoft.com