Stale Accounts In A Privileged Role — Detection Rule

Identifies when an account hasn't signed in during the past n number of days.

Read the full analysis on IntelFusions