BITSAdmin Abuse - Malware Download via BITS Jobs
Detects the use of the BITSAdmin utility to create, add, resume, or complete download jobs, which may indicate an adversary attempting to download malicious files or tools onto a system.
Microsoft Sentinel (KQL)
