Method for identifying userids making rest/api calls with basic authentication.

Summary:
As many already know, Oracle is planning on disabling basic authentication and requiring customers to move to token based authentication in March of 2027

Does anyone have a method for determining/auditing which userids are still using basic authentication for rest/api connections?

We know our integration service account and are working on updating our integration users, but there are people using Postman and other rest api clients. and as the rest api security is bundled into many custom roles we want to have way to target communications to only users using it, as well as track people who haven't stopped using it before March.