Files
SigmaHQ-sigma/rules/linux/file_create