Test your knowledge: Proactive security monitoring and alerting — Question 4

A cybersecurity professional is implementing Google's Event Threat Detection in their organization. They set up built-in detection rules to enhance security. Which of the following rules are they most likely using?