Determined by your investigation, disable the app and suspend and reset passwords for all influenced accounts and remove the inbox rule. New application with mail permissions getting reduced consent sample Severity: Medium This detection identifies OAuth apps produced lately in rather new publisher tenants with the next traits: JoinBrands https://shermanl900wtp7.wikitron.com/user