Verify whether the app is essential to the Group right before thinking of any containment steps. Deactivate the application using app governance or Microsoft Entra ID to circumvent it from accessing sources. Current application governance procedures might have currently deactivated the application.FP: If soon after investigation, you'll be able to