Scripted Graph API pagination/delta/search traversal of large result sets
Detects anomalous Microsoft Graph API usage patterns where a single account interacts with a high number of unique request paths using common API pagination or search parameters, indicating potential resource enumeration or reconnaissance activity.
Microsoft Sentinel (KQL)
