Detects suspicious enumeration of the domain the user is associated with.
Read the full analysis on IntelFusions