SQL Server - new member added to a server role

Detects scenarios where an attacker adds his account to a server role (sysadmin, securityadmin, serveradmin, ...)