TP: If you can validate that uncommon activities, which include significant-volume utilization of OneDrive workload, ended up done via the application through Graph API.Recommended Action: Classify the alert as being a Wrong positive and take into account sharing comments dependant on your investigation from the alert.This detection triggers an ale