Files
blue-team-tools/rules/windows/process_tampering