cscli collections install crowdsecurity/windows
This collection installs a parser for windows event logs + flat file, and a parser/scenario for auth bruteforce
