add windows security templates, dont apply tags to all logs