Based on your investigation, disable the application and suspend and reset passwords for all affected accounts.TP: If you can verify that strange activities, which include higher-volume utilization of SharePoint workload, have been carried out by the application by way of Graph API.To ban use of the application, Visit the appropriate tab for your a