https://redbeardsec.com/windows-event-logs-detection-and-forensics-power/