Confirm whether the application is critical for your organization just before looking at any containment actions. Deactivate the app making use of application governance or Microsoft Entra ID to circumvent it from accessing sources. Existing application governance procedures may need by now