This detection identifies OAuth apps with substantial privilege permissions that accomplish a large number of searches and edits in OneDrive applying Graph API. Based on your investigation, disable the app and suspend and reset passwords for all impacted accounts and take away the inbox rule.