Files
SigmaHQ-sigma/rules/windows/create_remote_thread