A Security-Enabled Global Group Was Deleted — Detection Rule

Detects activity when a security-enabled global group is deleted

Read the full analysis on IntelFusions