Add logsource definition

rules/windows/file/file_access/file_access_win_browser_credential_stealing.yml

@@ -14,6 +14,7 @@ tags:
 logsource:
     category: file_access
     product: windows
+    definition: file_access rules are using the Microsoft-Windows-Kernel-File ETW provider
 detection:
     selection:
         - FileName|contains:

rules/windows/file/file_access/file_access_win_credential_manager_stealing.yml

@@ -13,6 +13,7 @@ tags:
 logsource:
     category: file_access
     product: windows
+    definition: file_access rules are using the Microsoft-Windows-Kernel-File ETW provider
 detection:
     selection:
         FileName|contains:

rules/windows/file/file_access/file_access_win_dpapi_master_key_access.yml

@@ -13,6 +13,7 @@ tags:
 logsource:
     category: file_access
     product: windows
+    definition: file_access rules are using the Microsoft-Windows-Kernel-File ETW provider
 detection:
     selection:
         FileName|contains:

rules/windows/file/file_access/file_access_win_susp_cred_hist_access.yml

@@ -13,6 +13,7 @@ tags:
 logsource:
     category: file_access
     product: windows
+    definition: file_access rules are using the Microsoft-Windows-Kernel-File ETW provider
 detection:
     selection:
         FileName|endswith: '\Microsoft\Protect\CREDHIST'