Unfamiliar Sign-In Properties — Detection Rule

Detects sign-in with properties that are unfamiliar to the user. The detection considers past sign-in history to look for anomalous sign-ins.