This detection identifies OAuth apps with higher privilege permissions that conduct a large number of searches and edits in OneDrive employing Graph API. TP: When you’re in a position to confirm the consent request for the application was sent from an unknown or external source and also the application https://aloisf153odr1.magicianwiki.com/user