Tuning Sentinel Analytic Rules: New Executable via Office FileUploaded Operation

So this is going to be the beginning of a series where I document my journey into Detection Engineering. My main SIEM I’m using at this time is Microsoft Sentinel. This is a SIEM I’ve been dying to use at my old job and pitched the benefits of standi...