Authentication Occuring Outside Normal Business Hours — Detection Rule

Detects user signs ins outside of normal business hours.

Read the full analysis on IntelFusions