Classify the alert as a Fake favourable and look at sharing comments based upon your investigation of your alert.TP: If you're able to affirm that strange routines, including significant-volume usage of SharePoint workload, have been done via the app by way of Graph API.This?can point out an try and camouflage a malicious or risky application as a