[Rule Tuning] Make Rules Compatible with Windows Forwarded Logs#2761

w0rk3r merged 7 commits intomainelastic/detection-rules:mainfrom

forwarded_compatelastic/detection-rules:forwarded_compatCopy head branch name to clipboard