detections/audit_log_cleared.yml
