hello team , I am looking for few things at the content level and if you can come up something with these, it will be really helpful
- Rule triggered for the very first time in the SecOps
- Rule not triggered in last 30 / 90 days
- Rule recently triggered, but not seen in last 90days