github.com/0xrawsec/gene/v2 (go): Signature Engine for Windows Event Logs
Keywords: dfir|evtx-signature-engine|sysmon|threat-hunting