Detects activity when a member is removed from a security-enabled global group
Read the full analysis on IntelFusions