crowdsec/pkg/acquisition/modules/wineventlog/testdata/Setup.evtx