Confirm whether or not the application is critical for your Firm ahead of considering any containment steps. Deactivate the application applying application governance or Microsoft Entra ID to forestall it from accessing methods. Current app governance policies might have already deactivated the application. .Shared redirects to suspicious R