Proposed Action: Classify the alert as being a Wrong optimistic and take into consideration sharing opinions based upon your investigation of the alert.This detection identifies an OAuth App that consented to suspicious scopes, generates a suspicious inbox rule, and after that accessed consumers mail folders and messages in the Graph API.The servic