FP: If just after investigation, you could affirm which the application contains a genuine organization use inside the Group, then a Fake optimistic is indicated.Validate whether or not the app is important towards your Corporation prior to thinking of any containment steps. Deactivate the app employing application governance or Microsoft Entra ID