onedrive enum

Enumerates candidate Microsoft 365 identities by sending unauthenticated HTTP HEAD requests to OneDrive personal-site URLs built from a tenant, candidate username, domain, and Microsoft cloud endpoint. Upstream classifies 401/403 as valid and 404/301/302 as invalid, with other statuses reported as unknown. The tool author's 2023 article explains that SharePoint's Modern Auth setting can make every request to the host return 401 when set to Block Access. A 404 can also mean the user's OneDrive URL has not been created because the user has not accessed OneDrive; Microsoft documents that URL conflicts can append a number or GUID and that a UPN change changes the URL. These responses are heuristic signals, not authoritative account checks.