crowdsec/pkg/acquisition/modules/wineventlog/test_files/Setup.evtx