Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

Analyzing Malicious Microsoft Graph API Rate Limit Count

Steven Lim@KQLWizard

•updated Jul 1, 2025•5•0•138

KQL Query

Microsoft Sentinel (KQL)

Tags

T1071.001 - Web Protocols T1070.004 - File Deletion T1087.001 - Local Account T1040 - Network Sniffing T1078 - Valid Accounts TA0011 - Command and Control TA0005 - Defense Evasion TA0007 - Discovery TA0006 - Credential Access TA0003 - Persistence TA0004 - Privilege Escalation TA0001 - Initial Access T1059.009 - Cloud API TA0002 - Execution Cloud Api Call Network Connection Admin Activity Azure Office 365 Azure Sentinel M365 Unified Audit Logkql

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?