TP: If you can affirm that unconventional pursuits, for example significant-volume usage of OneDrive workload, were being executed via the application by Graph API.Confirm if the app is critical for your organization ahead of looking at any containment steps. Deactivate the app working with app governance or Microsoft Entra ID to prevent it from ac