Hello Team,For the 'impossible_travel_login_activity' alert involving from a user, our initial review of the events showed activity from only one country in the SOAR case. However, when we applied the rule in the SIEM, it identified an additional eve...