github.com/0xrawsec/gene (go): Signature Engine for Windows Event Logs
Keywords: dfir|evtx-signature-engine|sysmon|threat-hunting