TP: If you can ensure that inbox rule was produced by an OAuth 3rd-bash app with suspicious scopes sent from an not known source, then a true positive is indicated.That description could suggest it’s a convoluted, unfo… Read More