TP: If you can ensure the OAuth app is sent from an not known source, and redirects to some suspicious URL, then a true positive is indicated.Recommended action: Overview the Reply URL, domains and scopes asked for through the app. Depending on your investigation, you are able to prefer to ban access to this app. Assessment the level of permission … Read More