Forum Discussion

user32954811's avatar
user32954811
Copper Contributor
Mar 31, 2025

Unknown Behaviour Involving GroupsService in OfficeActivity

I have spotted a few hundred events with the following KQL query in my environment. 

 

This is the result of one of the entries. 

 

It looks like a regular legitimate behaviour by Microsoft but I don't seem to find any documentation about it. Can anyone share the insight of it? Thank you! 

No RepliesBe the first to reply

Resources