Firewall Automated Configuration Change Monitoring
Automate daily manual monitoring of Firewall changes that are performed by the Security Engineer. Additionally, this can be fine-tuned (more on that on next upcoming queries) into an automated rule such as Custom Detection Rule in Defender, Analytics Rule in Sentinel, or Saved Search with Alert Actions within Splunk (SPL) to detect potential changes by unknown authorized individual.
Microsoft Sentinel (KQL)
