#31700 Operational | P3 | Microsoft 365: Consent to Application Granted @ Blue Mountain Clinic

Created from Lead: https://artichoke.shield.syncromsp.com/leads/29945417/convert

[embedded image](https://www.blumira.com/)

Operational | P3 | Microsoft 365: Consent to Application Granted @ Blue Mountain Clinic

Blumira has detected Microsoft 365: Consent to Application Granted for Blue Mountain Clinic on 2025-01-16 12:13PM MST and triggered action Create Informational Finding for Responders.

Analysis:

User [email protected] has granted the application "RocketCyber MS Security App - Including Remediation" consent to access data in your organization's Microsoft 365 tenant. Only approved applications with a legitimate business use case should have permissions to access sensitive data like contact information, email, or documents. Unexpected 'Consent to Application' activity to an unapproved application may indicate successful consent phishing by a threat actor.

For more information about Microsoft 365 Consent Phishing, see the Microsoft documentation: [Protect against consent phishing](https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/protect-against-consent-phishing?source=recommendations).

Finding ID: F-25-02-FB5B

Finding Data Source: Microsoft365 Azure AD
Replying to this email does not open a ticket or notify the support team. Please email [email protected] or comment within the Finding.

[Learn More](https://app.blumira.com/120413f6-dfa7-4ba7-8964-11dd90ed9bf2/query/findings/fb5b2199-1934-42c7-b6e1-ee9a323c0c4c)

[embedded image]

[email protected]
[206 E. Huron Street, Suite 106, Ann Arbor, MI 48104](#)

921959fd-1b9d-47fe-a797-0809150509dd

[embedded image]

Automation Blumira ran on this ticket. Actions: Change Status to New-Blumira