MCAS and REST API detection

Question

Hi all,&nbsp;Im still fairly new to MCAS and i couldn't find any answers in my search so apologies if this has been asked.&nbsp; I was wondering if MCAS can be used to detect/alert against REST API attempts from malicious IPs or unknown devices etc.&nbsp; This could be coming from MS Graph or wherever else that has an API that is exposed or if there is something else that already does that.&nbsp;Thanks.

valon_kolica · Answer

Tommytong&nbsp;
&nbsp;
Sebastien Molendijk: Is this something you can speak to?&nbsp;

sebastien molendijk · Answer

Hi Tommytong&nbsp;,
&nbsp;
Yes. An example below of a Flow accessing some data in SharePoint: you can see ine agent string (Flow/Logic Apps) and the IP used to access the data using API connections.
In this case it's an Azure IP, but let's say it would be a script running on a PC, we ould detect this.

tommytong · Answer

Thanks Sebastien Molendijk&nbsp;&nbsp;Do you any MS Graph examples by chance?&nbsp;

Forum Discussion

MCAS and REST API detection

Share

Resources