TP: If you're able to verify that inbox rule was made by an OAuth third-party app with suspicious scopes sent from an unknown supply, then a true beneficial is indicated. FP: For those who’re able to confirm that LOB app accessed from unconventional spot for genuine purpose and