Microsoft Graph API enumeration of users via Axios client user-agent

Ibrahim Saud@tektrix

•updated 22 days ago•0•0•4

Detects Microsoft Graph API requests targeting user information endpoints (/v1.0/users or /v1.0/me) using specific search filters associated with payroll or human resources and identified by the Axios HTTP client User-Agent string. This pattern is consistent with reconnaissance activities.