Blog Post

Microsoft Security Experts Blog
16 MIN READ

Cloud forensics: Why enabling Microsoft Azure Graph Activity logs matters

ShivaP's avatar
ShivaP
Icon for Microsoft rankMicrosoft
Sep 03, 2024
Introduction Microsoft Graph is a unified REST API endpoint that allows you to query data from various sources, including data stored in Microsoft 365. Microsoft Graph provides access to a suite of...
ShivaP_4-1725377820547.png
Updated Jul 22, 2025
Version 4.0
microsoft detection and response team (dart)
adex's avatar
adex
Copper Contributor
Nov 28, 2024

Function: One of the important fields in MicrosoftGraphActivityLogs is the ResourceURI field. Although this field is long and difficult to analyze, the parse_url() function can be used to divide the data to show an easily readable version of the Path field, making it easier to query and analyze.

Looks like you inytend to write "RequestUri"