Audit AD Service Account Password Rotation Compliance
This KQL audit all your AD service accounts ( account with PasswordNeverExpires attribute set) whether the password was updated based your service account password rotation policy. (E.g In this KQL it's set to one year)
Microsoft Sentinel (KQL)

