Demo: Creating analytics rules in Microsoft Sentinel