Playbook of the Week
Automating Response to Unauthorized User Privilege Escalations Using PowerS...
Automating response to unauthorized privilege escalation activity such as a user being added to local administrator group using a PowerShell command