O365 Entra ID App Permissions Percent Threshold Exceeded
Detects when an excessive number of permissions are assigned to an Entra ID application within a time window, potentially indicating a greedy permission grab, as a percentage from old permissions to new permissions
YARA-L

