Activity Log alert exists for security solution changes

# Activity Log Alert for Security Solution create/update
resource "azurerm_monitor_activity_log_alert" "<example_resource_name>" {
  name                = "<example_resource_name>"
  resource_group_name = "<example_resource_name>"
  scopes              = ["/subscriptions/<example_resource_id>"]

  criteria {
    category       = "Administrative"
    operation_name = "Microsoft.Security/securitySolutions/write" # Critical: fires on Security Solution create/update
  }
}

// Activity Log Alert for Security Solution create/update
resource activityLogAlert 'Microsoft.Insights/activityLogAlerts@2020-10-01' = {
  name: '<example_resource_name>'
  location: 'Global'
  properties: {
    scopes: [ '/subscriptions/<example_resource_id>' ]
    condition: {
      allOf: [
        {
          field: 'category'
          equals: 'Administrative'
        }
        {
          field: 'operationName' // Critical: match Security Solution create/update
          equals: 'Microsoft.Security/securitySolutions/write' // Triggers on this operation
        }
      ]
    }
    enabled: true
  }
}