FP: If following investigation, you could ensure which the app contains a authentic enterprise use in the organization, then a Phony good is indicated.Verify whether the app is important to the Business in advance of thinking of any containment steps. Deactivate the app working with app governance or Microsoft Entra ID to avoid it from accessing re