TP: If you're able to confirm which the OAuth app has encoded the Exhibit name with suspicious scopes shipped from an not known source, then a true positive is indicated.TP: If?you are able to?confirm a large quantity of uncommon e mail look for and read pursuits with the Graph API by an OAuth app with a suspicious OAuth scope and which the applica