Enumeration observed in the Microsoft Graph API using GraphRunner GraphRecon command
Identify the use of the GraphRunner recon command Invoke-GraphRecon with the permission enum flag set, providing allowed actions and conditional access data for the current user.
YARA-L
