How to Create a Detection Rule to Determine Operating System Information