$ 0 0 Is there a query that I can use that will check for unauthorized deletion of event and security logs?