Suggested Motion: Classify the alert for a Phony beneficial and look at sharing feedback according to your investigation on the alert.Validate whether the app is crucial to the organization in advance of contemplating any containment actions. Deactivate the application utilizing app governance or Microsoft Entra ID to stop it from accessing means.