New member added to an Exchange administration group (medium risk)

Detects scenarios where a new member is added to a sensitive group related to Exchange server