can anyone help me understand the purpose of the Application Type filter on the Enterprise Applications page in AAD. When I choose Enterprise Applications it displays many apps from MS (Intune, Teams, FastTrack and others). When I choose Microsoft Applications it shows Intune again, but does not show Teams, and it has suspiciously named app like Devil Fish, CMAT, and Yggdrassil.
I was thinking that I could assume that that all of the "Microsoft Applications" were legitimate and could be trusted and that we could ignore them during our security review, but now I am not so sure that this is a good idea.
I would like to remove the apps that don't have a legitimate business purpose but making this determination is much more complicated than I expected
