Validate whether or not the application is critical to the Business right before thinking of any containment steps. Deactivate the app using app governance or Microsoft Entra ID to forestall it from accessin