Core Banking System After Hours Logon Automation
This is a credential after-hours logon activity automation, whenever an employee that's not supposed to log on to the core banking system after hours do so, this will trigger and alert the SOC team.
Microsoft Sentinel (KQL)
