Note This article was last updated on 01/27/2025 for readability and updated URLs, but content review and image updates are in process :)

Note This article was last updated on 01/27/2025 for readability and updated URLs, but content review is in process. New guidance is to enable the credential theft rule out of the box, and there are new rules to put in audit mode and add to the queries.