feat: extended coverage of existing defender tampering rules
Suspicious Browser Child Process
r-dns
cs-host
TBD