The operation couldn't be performed because 'Default' matches multiple entries. (mdo_atpprotection)
Custom recAction: Dynamic CAP: Fortify block known compromised IP addresses conditional access policy. IP addresses updated in CAP nightly from elastic query
Add exclude these users, groups, domains parameter to auto forwarding recActions
