OAuth Illicit Consent Grant - Sensitive Permission Granted to Application
Detects instances where a user grants an OAuth application sensitive permissions, which could indicate an illicit consent grant attack where an adversary lures a user into authorizing a malicious application to access their email, files, or directory data.
Microsoft Sentinel (KQL)
