Detection notebook

A growing set of sanitized detection rules with the log source, the false-positive notes and the analyst steps that follow each alert.

The full build log for this project is still being written up.