This detection identifies apps consented to higher privilege OAuth scopes, that accessed Microsoft Groups, and manufactured an uncommon quantity of go through or publish chat concept routines through Graph API. A non-Microsoft cloud app made anomalous Graph API phone calls to OneDrive, which include significant-volume information usage. Detected by https://owenx476mvy9.wikififfi.com/user