Hunt for Groups endpoint requests in the Microsoft Graph API

Google SecOps@GoogleSecOps

•updated Feb 24, 2025•0•0•1

This detects when the groups endpoint is called in the Graph API. GraphRunner contains a function called Get-DynamicGroups but other tools may as well.