FP: If after investigation, you can ensure the person agent utilized by the application features a authentic business use in the Group.Suggested steps: Classify the alert like a TP. According to the investigation, if the app is malicious, you'll be able to revoke consents and disable the application in the tenant.The written content on DollarSprout