Azure - Using Sentinel to find out who deleted an Active Directory user