The current requieredDataType(SecurityAlert (Office 365 Security & Compliance)) is incorrect.
According to OfficeATP it should be SecurityAlert (OATP).
This folder contains Detections based on different types of data sources that you can leverage in order to create alerts and respond to threats in your environment.
For general information please start with the Wiki pages.
More Specific to Detections:
Contribute to Analytic Templates (Detections) and Hunting queries
Specifics on what is required for Detections and Hunting queries is in the Query Style Guide
These detections are written using KQL query langauge and will provide you a starting point to protect your environment and get familiar with the different data tables.
The rule created will run the query on the scheduled time that was defined, and trigger an alert that will be seen both in the SecurityAlert table and in a case in the Incidents tab
1beae7fec4