Scripted SharePoint/OneDrive Mass Download via python-httpx

Ankit Mehta@Secvyn

•updated Sep 11, 2026•1•0•2

Detects anomalous, high-volume file access or download operations in SharePoint from a user agent identified as 'python-httpx'. This behavior is characteristic of automated scripts or potential data exfiltration attempts targeting cloud-based file storage.