According to your investigation, disable the app and suspend and reset passwords for all influenced accounts and remove the inbox rule. This detection identifies an OAuth Application that consented to suspicious scopes, makes a suspicious inbox rule, after which you can accessed end users mail folders and messages throughout https://henryo246rtu1.loginblogin.com/profile