Reimplement amsi_collector aux module as amsi_etw (kevoreilly#2885)

* Reimplement amsi_collector

* indendation/enabled setting fix

* linting amsi_etw

* update default aux conf for the amsi_etw refactor

* Apply suggestions from code review

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

---------

Co-authored-by: doomedraven <doommedraven@gmail.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

Author: 3 people