TP: If you're able to validate that the OAuth app is delivered from an unknown resource, and redirects to a suspicious URL, then a true constructive is indicated.Advised Action: Classify the alert like a Bogus beneficial and take into account sharing suggestions depending on your investigation of your alert.Certainly one of my favorite sayings or q