python-httpx User-Agent Accessing Microsoft Graph API

Ibrahim Saud@tektrix

•updated Sep 18, 2026•0•0•1

Detects network traffic directed towards Microsoft Graph API that utilizes the 'python-httpx' User-Agent. This combination is often associated with automated scripts, potentially used by adversaries (e.g., Storm-3121/Storm-3032) for automated data collection and exfiltration from Microsoft 365 environments.