There are some common rules for windows time rule for $Standard_Information and $Filename. Here is the table for those common rules. This below table (created by SANS) is the rule ...