17d98cc8dd
* rule tuning 'Potential Microsoft 365 Brute Force via Entra ID Sign-Ins' * updated lookback windows, date truncation times * updated investigation guide