Webserver IIS configuration edited (SYSMON)

Detects scenarios where an attacker attempts to edit IIS configuration file in order to load a module.