Threat Hunting in the O365 Ecosystem