Chainsaw provides a powerful ‘first-response’ capability to quickly identify threats within Windows forensic artefacts ... Sigma rules and example Event logs, you can download it from the releases ...