Delegated Permissions Granted For All Users — Detection Rule

Detects when highly privileged delegated permissions are granted on behalf of all users

Read the full analysis on IntelFusions