The EWS usage report identifies applications still calling EWS by Application ID only — it does not resolve them to names. Paste the exported CSV (or any list of Application IDs) to get application names, vendors, and the recommended action for each, with sources.
Microsoft 365 admin center → Reports → Usage → Exchange → EWS usage → Export. Bare Application IDs (e.g. copied from Entra sign-in logs) work too.
Check Entra ID → Enterprise applications for the App ID first — it may be a line-of-business app registered in your own tenant. If it isn’t, send it to us: we research unidentified EWS callers and add them to the database with sources. appid@whatbreaksnext.com
Vendors ship fixes, new applications appear, and change-advisory boards want evidence of progress. We’re building continuous EWS remediation monitoring — multi-tenant for managed service providers, with digest cards delivered into Microsoft Teams.