ServiceNow - Large Amount of Requests Created by Single User Within Short Time Period

A potentially malicious user is creating a large amount of requests that overwhelms the IT team. This disrupts response processes and important tickets may be ignored or delayed. This detection detects users that create a large amount of tickets within a short time period.

Microsoft Sentinel (KQL)