It also verifies if the application has a relatively low worldwide consent rate and makes various calls to Microsoft Graph API to obtain e-mail of consenting people. Apps that set off this alert may very well be undesirable or malicious apps trying to obtain consent from unsuspecting users.FP: If you're able to verify that app created an inbox rule