Sigma rules from Joe Security - View it on GitHub