As is so often the case when you deal a little more intensively with a topic, you find that someone has already been there and has completely played through the topic 😂 For all the RC4-hunters out there (in prep to AD patching) - use this #Sentinel workbook: https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/azure-sentinel-insecure-protocols-workbook-reimagined/ba-p/1558375