Add or Remove Computer from DC — Detection Rule

Detects the creation or removal of a computer. Can be used to detect attacks such as DCShadow via the creation of a new SPN.