F"ollow-on activity included Microsoft Graph API reconnaissance and attempts to add additional credentials on the related ...