@load signatures/base redef signature_files += "signatures/detect-windows-shells.sig";