When CrowdStrike Falcon detects a suspicious outbound network connection from a runtime workload, what is the best immediate action to mitigate potential risks?
After identifying a risky Azure Service Principal using the CrowdStrike CIEM/Identity Analyzer, what is the most appropriate action to mitigate the risk?