Adobe Zero-Day (CVE-2026-34621)
Packet Inspection of the exploitation of the adobe zero day vulnerability through CommonSecurityLog. Due to the fact that CSL usually does not populate all the fields, many conditions come with IsEmpty(cond), but you can comment that if too broad.
Microsoft Sentinel (KQL)
