#30715 Operational | P3 | Microsoft 365: Consent to Application Granted @ Blue Mountain Clinic

New-Blumira Created Dec 17, 2024, 9:40 PM

System (internal) Dec 17, 2024, 9:40 PM

Created from Lead: https://artichoke.shield.syncromsp.com/leads/29429547/convert

Check-in (internal) Dec 17, 2024, 9:40 PM

[embedded image](https://www.blumira.com/)

Operational | P3 | Microsoft 365: Consent to Application Granted @ Blue Mountain Clinic

Blumira has detected Microsoft 365: Consent to Application Granted for Blue Mountain Clinic on 2024-12-17 02:12PM MST and triggered action Create Informational Finding for Responders.

Analysis:

User [email protected] has granted the application "MS SSO Blumira Prod" consent to access data in your organization's Microsoft 365 tenant. Only approved applications with a legitimate business use case should have permissions to access sensitive data like contact information, email, or documents. Unexpected 'Consent to Application' activity to an unapproved application may indicate successful consent phishing by a threat actor.

For more information about Microsoft 365 Consent Phishing, see the Microsoft documentation: [Protect against consent phishing](https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/protect-against-consent-phishing?source=recommendations).

Finding ID: F-24-51-0207

Finding Data Source: Microsoft365 Azure AD
Replying to this email does not open a ticket or notify the support team. Please email [email protected] or comment within the Finding.

[Learn More](https://app.blumira.com/120413f6-dfa7-4ba7-8964-11dd90ed9bf2/query/findings/02074944-c3b0-48fc-93f8-4e10d3a802c3)

[embedded image]

[email protected]
[206 E. Huron Street, Suite 106, Ann Arbor, MI 48104](#)

a38bdc5b-1691-4324-9659-caa194cc9d05

[embedded image]

Ticket Automation (internal) Dec 17, 2024, 9:40 PM

Automation Blumira ran on this ticket. Actions: Change Status to New-Blumira