TP: for those who’re able to confirm that LOB application accessed from uncommon area and executed uncommon things to do by way of Graph API.TP: If you can affirm that unusual activities, including higher-volume use of SharePoint workload, were done via the app by way of Graph API.Assessment all things to do performed through the application. Whe