This detection identifies when an app consented to suspicious OAuth scope and made a significant volume of strange e-mail look for things to do, including e-mail seek for unique content with the Graph API.FP:?If you’re?in a position to?validate?app has executed unique info from SharePoint or OneDrive look for and collection via Graph API by an OA