TP: If the app is not known or not getting used, the presented activity is potentially suspicious and should involve disabling the app, following verifying the Azure resource being used, and validating the application use during the tenant.Evaluation consent grants to the application made by end users and admins. Investigate all actions accomplishe