TP: If you're able to confirm that inbox rule was produced by an OAuth 3rd-occasion application with suspicious scopes shipped from an unfamiliar supply, then a true optimistic is detected. FP: If immediately after investigation, you can confirm the application has a genuine enterprise use from the Corporation, then https://newsocialapp15555.liberty-blog.com/30041074/new-app-social-networks-things-to-know-before-you-buy