Microsoft Graph Data Connect: Integrate with API and Query Data

In this demo, we use the GraphQL API which looks at the cumulative number of exfiltrated emails for each Outlook user ID that tells us how frequently a user has been sending emails outside the corporate boundary.

Using a single query, we can combine sentiment analysis and entity extraction to uncover long term data exfiltration. The result is that we can see the individuals that have most frequently forwarded confidential emails outside the corporate boundary to an external entity. With Microsoft Graph Data Connect, Microsoft 365 data can be continuously pulled to detect patterns of malicious activity and alerts can be set to mitigate the risk of security threats.

#microsoft365dev #neo4j #microsoftgraph