ServiceNow - Large Amount of Requests Created by Single User Within Short Time Period
A potentially malicious user is creating a large amount of requests that overwhelms the IT team. This disrupts response processes and important tickets may be ignored or delayed. This detection detects users that create a large amount of tickets within a short time period.
Microsoft Sentinel (KQL)

