Assorted, MIT licensed, threat hunting rules from @bradleyjkemp - View it on GitHub