Graph API payroll/HR personnel enumeration via axios client

Duo Tech@duotech

•updated Aug 10, 2026•12•0•15

Detects an account making repeated Microsoft Graph API user search requests for payroll/HR display names via an axios HTTP client against a specific ApplicationId, consistent with Storm-2755 payroll-personnel reconnaissance.