Microsoft Sentinel SOC 101: How to Detect and Mitigate Rare Domains Seen in Cloud Logs