CA Policy Removed by Non Approved Actor (26e7c5e2-6545-481e-b7e6-050143459635)

Monitor and alert on conditional access changes where non approved actor removed CA Policy.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Modify Authentication Process - T1556 (f4c1826f-a322-41cd-9557-562100848c84)	Attack Pattern	CA Policy Removed by Non Approved Actor (26e7c5e2-6545-481e-b7e6-050143459635)	Sigma-Rules	1
Abuse Elevation Control Mechanism - T1548 (67720091-eee3-4d2d-ae16-8264567f6f5b)	Attack Pattern	CA Policy Removed by Non Approved Actor (26e7c5e2-6545-481e-b7e6-050143459635)	Sigma-Rules	1