FP: If you're able to validate that no abnormal routines had been executed by the application or the application is meant to make unusually substantial volume of Graph phone calls. TP: If you're able to confirm that inbox rule was designed by an OAuth 3rd-party app with suspicious scopes https://robertw692ntz3.mywikiparty.com/user