2. OrgkitProvision a brand-new company with proper defaults in Windows, Offic365, and Azure
3. SwiftfilterExchange Transport rules to detect and enable response to phishing
4. Sysmon ConfigSysmon configuration file template with default high-quality event tracing