Hunt for Bad Request errors against the Groups endpoint in the Microsoft Graph API

Google SecOps@GoogleSecOps

•updated Feb 24, 2025•0•0•0

Identify a 400 bad request to the groups endpoint in the MS Graph API. GraphRunner's Invoke-SecurityGroupCloner function will trigger this if it fails to duplicate a group.