Microsoft Graph

Microsoft Graph is a Microsoft API developer platform that connects multiple services and devices.

Initially released in November 2015 as Office 365 Unified API, the Microsoft Graph builds on Microsoft 365 APIs and allows developers to integrate their services with Microsoft products, including Windows, Microsoft 365, and Azure. At its Build 2017 conference, Microsoft announced it would use the Microsoft Graph to bring new functionality and connectivity between Windows and other OS platforms, including Android and iOS.

The US Government's Cybersecurity and Infrastructure Security Agency recommends checking Graph API permissions for threat actors as part of detecting post compromise residual access.