diff --git a/datasets/atomic/m365/collection/enable_pop_imap_owa.zip b/datasets/atomic/m365/collection/enable_pop_imap_owa.zip
new file mode 100644
index 00000000..eb0da989
Binary files /dev/null and b/datasets/atomic/m365/collection/enable_pop_imap_owa.zip differ
diff --git a/datasets/atomic/m365/credential_access/o365spray_default.zip b/datasets/atomic/m365/credential_access/o365spray_default.zip
new file mode 100644
index 00000000..31643576
Binary files /dev/null and b/datasets/atomic/m365/credential_access/o365spray_default.zip differ
diff --git a/datasets/atomic/m365/credential_access/o365spray_reporting.zip b/datasets/atomic/m365/credential_access/o365spray_reporting.zip
new file mode 100644
index 00000000..e881d1ee
Binary files /dev/null and b/datasets/atomic/m365/credential_access/o365spray_reporting.zip differ
diff --git a/datasets/atomic/m365/defense_evasion/disable _strong_authentication.zip b/datasets/atomic/m365/defense_evasion/disable _strong_authentication.zip
new file mode 100644
index 00000000..a8cb1f03
Binary files /dev/null and b/datasets/atomic/m365/defense_evasion/disable _strong_authentication.zip differ
diff --git a/datasets/atomic/m365/defense_evasion/set-mailbox-audit_log_age_limit_to_zero.zip b/datasets/atomic/m365/defense_evasion/set-mailbox-audit_log_age_limit_to_zero.zip
new file mode 100644
index 00000000..63c48c61
Binary files /dev/null and b/datasets/atomic/m365/defense_evasion/set-mailbox-audit_log_age_limit_to_zero.zip differ
diff --git a/datasets/atomic/m365/defense_evasion/set_mailboxauditbypassassociation.zip b/datasets/atomic/m365/defense_evasion/set_mailboxauditbypassassociation.zip
new file mode 100644
index 00000000..1f1de633
Binary files /dev/null and b/datasets/atomic/m365/defense_evasion/set_mailboxauditbypassassociation.zip differ
diff --git a/datasets/atomic/m365/defense_evasion/unified_auditlog_ingestion_stopped.zip b/datasets/atomic/m365/defense_evasion/unified_auditlog_ingestion_stopped.zip
new file mode 100644
index 00000000..77d3fc30
Binary files /dev/null and b/datasets/atomic/m365/defense_evasion/unified_auditlog_ingestion_stopped.zip differ
diff --git a/datasets/atomic/m365/persistence/add_a_user_to_company_administrator_role.zip b/datasets/atomic/m365/persistence/add_a_user_to_company_administrator_role.zip
new file mode 100644
index 00000000..e5090ea7
Binary files /dev/null and b/datasets/atomic/m365/persistence/add_a_user_to_company_administrator_role.zip differ
diff --git a/datasets/atomic/m365/persistence/mail_account_delegation_full_access_permissions.zip b/datasets/atomic/m365/persistence/mail_account_delegation_full_access_permissions.zip
new file mode 100644
index 00000000..53b201f3
Binary files /dev/null and b/datasets/atomic/m365/persistence/mail_account_delegation_full_access_permissions.zip differ