https://modernmanagement.blog/2019/02/27/alert-on-unauthorized-changes-in-microsoft-intune-via-log-analytics/