Incidents
ENTRA-AP-092MediumAI investigatingNeeds Review66%
Suspicious OAuth app consent in Entra ("PDF Toolkit Pro")
Affected: k.nguyenEntra IDUpdated 07:21 PT · Owner AI SOC
AI summary
User consented to multi-tenant app requesting Mail.Read and offline_access. Publisher unverified.
Verdict
Needs Review66%
Customer-approved model · AWS GovCloud (us-gov-west-1) · inside Halcyon's account. Time to verdict 47s.