TP: For those who’re equipped to substantiate the OAuth app having higher privilege scopes continues to be created and is particularly building substantial quantities of Virtual Machines in your tenant, then a true positive is indicated.This detection identifies when an application consented to suspicious OAuth scope and built a substantial volum