Microsoft Graph API Access to Compromised Israeli Law Firm Mailbox

Detects Microsoft Graph API requests targeting user mailboxes within a tenant or organization structure likely associated with Israeli legal entities, identified by .co.il domain patterns in the Request URI.