Short-Lived Account Creation and Deletion Detection

Detects accounts that are created and subsequently deleted within 24 hours, which may indicate malicious activity such as temporary account creation by attackers.

Microsoft Sentinel (KQL)