Detect Unix, Windows FileTime, and ISO 8601 timestamps.
Convert simple Sigma selections to KQL and SPL starters.
Calculate CVSS 3.1 base scores, with 4.0 marked for a later formula pass.