Microsoft Graph Explained

Microsoft Graph
Author:	Microsoft Corporation
Released:	November 2015
Replaces:	Office 365 Unified API
Website:	https://developer.microsoft.com/en-us/graph

Microsoft Graph is a Microsoft API developer platform that connects multiple services and devices.

Initially released in November 2015 as Office 365 Unified API,^[1] the Microsoft Graph builds on Microsoft 365 APIs and allows developers to integrate their services with Microsoft products, including Windows, Microsoft 365, and Azure.^[2] At its Build 2017 conference, Microsoft announced it would use the Microsoft Graph to bring new functionality and connectivity between Windows and other OS platforms, including Android and iOS.^[3]

The US Government's Cybersecurity and Infrastructure Security Agency recommends checking Graph API permissions for threat actors as part of detecting post compromise residual access.^[4]

Notes and References

1. Web site: Foley. Mary Jo. 2017-07-05. Microsoft Graph APIs: The Glue That's Starting to Stick -- Redmondmag.com. 2022-02-05. Redmondmag. en-US.
2. Web site: Microsoft Recasts Office as New Collaboration Resource. 2015-11-18. Fortune. 2017-05-11.
3. Web site: Microsoft's next mobile strategy is to make iOS and Android better. 2017-05-11. The Verge. 2017-05-11.
4. Web site: Detecting Post-Compromise Threat Activity in Microsoft Cloud Environments. 2022-02-05. Cybersecurity and Infrastructure Security Agency.