TP: If you're able to confirm that inbox rule was developed by an OAuth 3rd-bash app with suspicious scopes sent from an unknown resource, then a true positive is indicated. To ban entry to the application, go to the suitable tab for the application on the App governance web https://abigailc194bbz1.wikififfi.com/user