Update README.md

DFIR AzureActivity Compromised Account

Successful Signin From Suspicious User Agen

Potential Beaconing Activity

Update MITRE Mapping Stats

Process Primary Token Elevated to SeDebugPrivilege

Scheduled Task AppData

Defender AV Exclusion Events

Rare .lnk File Created on Desktop

Update SignInsByOS.md

Alert Efficiency KQL

Create AlertEfficiency.txt

Create Detection Enrichment - Entra User.md

Create Detection Enrichment - Entra Group Membership.md

AccountName to SID