Check if ConnectWise is in your app inventory
Detects the presence of known malicious or suspicious OAuth application IDs as well as specific third-party applications like SkyKick or ConnectWise within OAuth application metadata over a 30-day window.
Microsoft Sentinel (KQL)
