AN UNBIASED VIEW OF NEW APP

TP: If you can affirm which the OAuth app is shipped from an unfamiliar source, and redirects to a suspicious URL, then a true positive is indicated.FP: If you're able to confirm that application produced an inbox rule to a brand new or personal exterior e mail account for authentic causes.Advised motion: Assessment the Reply URL, domains and scope