Classify the alert as being a false beneficial and think about sharing feedback based on your investigation in the alert. This detection identifies an OAuth App that consented to suspicious scopes, creates a suspicious inbox rule, and afterwards accessed customers mail folders and messages in the Graph API. Description: https://zbigniewl890wso6.wikikali.com/user