Fix disabled account hunting queries

[juanjosalco]

Remove locale-dependent disabled-account filters and support both Microsoft Sentinel and unified Defender IdentityInfo schemas.

Change(s):

• Removed exact ResultDescription filters from three disabled-account hunting queries while retaining ResultType == 50057.
• Added column_ifexists() normalization for:
  • TimeGenerated / Timestamp
  • AccountUPN / AccountUpn
  • UserType / Type
• Applied the schema compatibility update to four affected solution hunting queries.
• Updated the affected hunting-query versions.
• Updated the solution package and release notes to version 3.0.4.

Reason for Change(s):

• ResultDescription is locale-dependent, while result code 50057 consistently identifies disabled-account sign-in failures.
• The IdentityInfo schema differs between Microsoft Sentinel and unified Defender environments. Normalizing the column names allows the queries to work with either schema and resolves KQL validation failures.

Version Updated:

• Yes — affected hunting-query versions were incremented.
• Solution package version updated to 3.0.4.
• No Analytic Rule templates were modified.

Testing Completed:

• Yes.
• Full local solution validation completed successfully.
• All 44 scoped KQL validation tests passed.
• Overall result: 14 validators passed, 0 failed, and 4 were skipped or not applicable.

Checked that the validations are passing and have addressed any issues that are present:

• Yes.

[v-atulyadav]

Hi @juanjosalco,
Please repackage the solution. Thanks