Check out this interesting guide just for Pi-hole users

It linked back to a previous Sysmon post on Event ID 22 I published last year.