Suspicious Assistive Agent Behavior Detected Through Microsoft Entra Agent ID Logs