ConnectWise Supply-Chain Microsoft Graph API Token Sweep

Lacey Cochrane@NullVectorX

•updated 8 days ago•8•0•11

Detects high-volume Microsoft Graph API activity using attacker-associated user agents, such as python-requests, curl, or httpx, which may indicate automated token sweeping or data collection associated with supply-chain attacks.