I am trying to create a Rule which is used to detect "Users deleted less than 24 hours after creation". In Condition, I want to get End Time (Event ID: 630), and End Time (Event ID: 624) which has the same Target User Name; then compare these 2 End Time values. But I don't know how to do it.
Does anyone know or have any other idea? Thank you very much.