Monitoring for Delete Security Solution events gives insight into changes to the active security solutions and may reduce the time it takes to detect suspicious activity.
Recommended Mitigation
Under Monitor -> Alerts, create an alert for 'Microsoft.Security/securitySolutions/delete'
Logging and monitoring
