During November 2024, pyllyukko contributed to the google/timesketch repository by developing a Sigma mapping for Windows Certificate Services Client Lifecycle events. This work involved updating the data/sigma_config.yaml file using YAML to enable parsing and analysis of security-related logs from Microsoft-Windows-CertificateServicesClient-Lifecycle-System. Leveraging skills in configuration management and log analysis, pyllyukko enhanced Windows security visibility within Timesketch, laying the groundwork for improved incident detection and response. The contribution focused on expanding detection capabilities for certificate lifecycle events, providing a foundation for future Windows event mappings. The work demonstrated technical depth in structured configuration and security event telemetry integration.