APT

ESET’s Cereal toolset turns an Exchange server into its own command post and steals mail from inside EdgeTransport.exe. Here is a read-only collection plus a Kali parser to find it.