File Creation

This detection is a simple query for file creation based on the filename and the device where the file was created.

Microsoft Sentinel (KQL)