Microsoft Sentinel Day 4: Mastering Incident Rules for Effective Security Event Management