https://www.joeyverlinden.com/dynamic-rules-for-device-tagging-in-microsoft-defender/