Creating Custom rules in Security Analytics

This video walks explains how to create a custom rule with examples on Google file drive is shared with external domain and Unauthorized access to admin console

[sgluc]

Hello! Is it possible to specify the required number of events to generate an alert?
Example: I want to detect a brute force scenario followed by a successful login on a Windows computer. To do this, I need there to be at least 3 failed logins and, after these failed logins, a successful login event.
Thanks!