Microsoft Graph API Access to Compromised Israeli Law Firm Mailbox
Detects Microsoft Graph API requests targeting user mailboxes within a tenant or organization structure likely associated with Israeli legal entities, identified by .co.il domain patterns in the Request URI.
Cortex XDR

