TP: If you can verify that inbox rule was made by an OAuth 3rd-celebration app with suspicious scopes delivered from an mysterious resource, then a true positive is detected.Assessment consent grants to the appliance created by buyers and admins. Examine all things to do accomplished via the app, especially usage of mailbox of related consumers and