Update readme, began updating OSBins with new template

yml/OSBinaries/Bash.yml

@@ -1,17 +1,35 @@
 ---
 Name: Bash.exe
-Description: Execute
-Author: ''
+Description: File used by Windows subsystem for Linux
+Author: 'Oddvar Moe'
 Created: '2018-05-25'
-Categories: []
 Commands:
   - Command: bash.exe -c calc.exe
-    Description: Execute calc.exe.
+    Description: Executes calc.exe from bash.exe
+    Usecase: Performs execution of specified file, can be used as a defensive evasion.
+    Category: Execute
+    Privileges: User
+    MitreID: T1218
+    MitreLink: https://attack.mitre.org/wiki/Technique/T1218
+    OperatingSystem: Windows 10
+    - Command: bash.exe -c calc.exe
+    Description: Executes calc.exe from bash.exe
+    Usecase: Performs execution of specified file, can be used to bypass Application Whitelisting.
+    Category: AWL Bypass
+    Privileges: User
+    MitreID: T1218
+    MitreLink: https://attack.mitre.org/wiki/Technique/T1218
+    OperatingSystem: Windows 10
 Full Path:
-  - '?'
-Code Sample: []
-Detection: []
+  - path: C:\Windows\System32\bash.exe
+  - path: C:\Windows\SysWOW64\bash.exe
+Code Sample: 
+- Code:
+Detection:
+ - IOC: Child process from bash.exe
 Resources:
-  - ''
-Notes: Thanks to ?
-
+  - Link: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules
+Acknowledgement:
+  - Person: Alex Ionescu
+    Handle: '@aionescu'
+---