This detection identifies when an app consented to suspicious OAuth scope and designed a substantial quantity of uncommon e mail lookup activities, for example email seek for certain content through the Graph API.FP: If you can validate that app created an inbox rule to a brand new or private exterior e mail account for genuine explanations.TP: Sho