https://www.systemtek.co.uk/2020/09/sharepoint-and-onenote-being-used-to-harvest-credentials/