[Rule Tuning] Azure Entra ID Rare App ID for Principal Authentication

[terrancedejesus]

Azure Entra ID Rare App ID for Principal Authentication needs adjusted to ignore common app IDs that authenticate OBO users. Client apps that are commonly used in phishing with first-party clients such as Microsoft Teams, Microsoft Office, MAB, etc.