System Guard Security Level Drop
Goal: Find machines in the last N days where the SystemGuardSecurityLevel value NOW is less than it was BEFORE. Step 1: Get a list of all security levels in the system where the level is not null.
Microsoft Sentinel (KQL)
