Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
Maintenance state changed to 1 (Last Run: ?1/?19/?2018 9:39 AM).	800	0		4	800	0	576460752303423488	19	Microsoft-Windows-TaskScheduler	de7b24ea-73c8-4a09-985d-5bdadcfa9017	Microsoft-Windows-TaskScheduler/Maintenance	956	2716	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:39:35 AM			microsoft-windows-taskscheduler/maintenance	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Maintenance state has changed	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Maintenance state changed to 3 (Last Run: ?1/?19/?2018 9:38 AM).	800	0		4	800	0	576460752303423488	18	Microsoft-Windows-TaskScheduler	de7b24ea-73c8-4a09-985d-5bdadcfa9017	Microsoft-Windows-TaskScheduler/Maintenance	956	2492	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:38:33 AM			microsoft-windows-taskscheduler/maintenance	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Maintenance state has changed	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Maintenance state changed to 1 (Last Run: ?1/?19/?2018 9:38 AM).	800	0		4	800	0	576460752303423488	17	Microsoft-Windows-TaskScheduler	de7b24ea-73c8-4a09-985d-5bdadcfa9017	Microsoft-Windows-TaskScheduler/Maintenance	956	2700	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:38:32 AM			microsoft-windows-taskscheduler/maintenance	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Maintenance state has changed	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Maintenance state changed to 3 (Last Run: ?1/?19/?2018 9:37 AM).	800	0		4	800	0	576460752303423488	16	Microsoft-Windows-TaskScheduler	de7b24ea-73c8-4a09-985d-5bdadcfa9017	Microsoft-Windows-TaskScheduler/Maintenance	956	1504	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:37:15 AM			microsoft-windows-taskscheduler/maintenance	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Maintenance state has changed	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Maintenance state changed to 1 (Last Run: ?1/?19/?2018 9:22 AM).	800	0		4	800	0	576460752303423488	15	Microsoft-Windows-TaskScheduler	de7b24ea-73c8-4a09-985d-5bdadcfa9017	Microsoft-Windows-TaskScheduler/Maintenance	1180	1284	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:22:48 AM			microsoft-windows-taskscheduler/maintenance	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Maintenance state has changed	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Maintenance state changed to 3 (Last Run: ?1/?19/?2018 9:14 AM).	800	0		4	800	0	576460752303423488	14	Microsoft-Windows-TaskScheduler	de7b24ea-73c8-4a09-985d-5bdadcfa9017	Microsoft-Windows-TaskScheduler/Maintenance	1180	1904	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:14:48 AM			microsoft-windows-taskscheduler/maintenance	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Maintenance state has changed	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Maintenance state changed to 1 (Last Run: ?1/?19/?2018 8:45 AM).	800	0		4	800	0	576460752303423488	13	Microsoft-Windows-TaskScheduler	de7b24ea-73c8-4a09-985d-5bdadcfa9017	Microsoft-Windows-TaskScheduler/Maintenance	964	1792	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:45:57 AM			microsoft-windows-taskscheduler/maintenance	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Maintenance state has changed	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Maintenance state changed to 3 (Last Run: ?1/?19/?2018 8:33 AM).	800	0		4	800	0	576460752303423488	12	Microsoft-Windows-TaskScheduler	de7b24ea-73c8-4a09-985d-5bdadcfa9017	Microsoft-Windows-TaskScheduler/Maintenance	964	3876	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:33:56 AM			microsoft-windows-taskscheduler/maintenance	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Maintenance state has changed	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Maintenance state changed to 1 (Last Run: ?1/?16/?2018 6:35 PM).	800	0		4	800	0	576460752303423488	11	Microsoft-Windows-TaskScheduler	de7b24ea-73c8-4a09-985d-5bdadcfa9017	Microsoft-Windows-TaskScheduler/Maintenance	1176	1392	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 6:35:05 PM			microsoft-windows-taskscheduler/maintenance	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Maintenance state has changed	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Maintenance state changed to 3 (Last Run: ?1/?16/?2018 6:26 PM).	800	0		4	800	0	576460752303423488	10	Microsoft-Windows-TaskScheduler	de7b24ea-73c8-4a09-985d-5bdadcfa9017	Microsoft-Windows-TaskScheduler/Maintenance	1176	1392	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 6:26:24 PM			microsoft-windows-taskscheduler/maintenance	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Maintenance state has changed	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Maintenance state changed to 1 (Last Run: ?1/?16/?2018 6:02 PM).	800	0		4	800	0	576460752303423488	9	Microsoft-Windows-TaskScheduler	de7b24ea-73c8-4a09-985d-5bdadcfa9017	Microsoft-Windows-TaskScheduler/Maintenance	1152	5108	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 6:02:38 PM			microsoft-windows-taskscheduler/maintenance	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Maintenance state has changed	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Maintenance state changed to 3 (Last Run: ?1/?16/?2018 5:52 PM).	800	0		4	800	0	576460752303423488	8	Microsoft-Windows-TaskScheduler	de7b24ea-73c8-4a09-985d-5bdadcfa9017	Microsoft-Windows-TaskScheduler/Maintenance	1152	2400	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:52:11 PM			microsoft-windows-taskscheduler/maintenance	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Maintenance state has changed	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Maintenance state changed to 1 (Last Run: ?1/?16/?2018 5:12 PM).	800	0		4	800	0	576460752303423488	7	Microsoft-Windows-TaskScheduler	de7b24ea-73c8-4a09-985d-5bdadcfa9017	Microsoft-Windows-TaskScheduler/Maintenance	924	5576	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:12:04 PM			microsoft-windows-taskscheduler/maintenance	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Maintenance state has changed	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Maintenance state changed to 3 (Last Run: ?1/?16/?2018 5:11 PM).	800	0		4	800	0	576460752303423488	6	Microsoft-Windows-TaskScheduler	de7b24ea-73c8-4a09-985d-5bdadcfa9017	Microsoft-Windows-TaskScheduler/Maintenance	924	1532	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:11:59 PM			microsoft-windows-taskscheduler/maintenance	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Maintenance state has changed	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Maintenance Task "NT TASK\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical" requests computer wakeup during next regular maintenance run.	808	0		3	808	0	576460752303423488	5	Microsoft-Windows-TaskScheduler	de7b24ea-73c8-4a09-985d-5bdadcfa9017	Microsoft-Windows-TaskScheduler/Maintenance	924	1984	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:01:59 PM			microsoft-windows-taskscheduler/maintenance	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info	Maintenance wakeup requested	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Maintenance Task "NT TASK\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical" requests computer wakeup during next regular maintenance run.	808	0		3	808	0	576460752303423488	4	Microsoft-Windows-TaskScheduler	de7b24ea-73c8-4a09-985d-5bdadcfa9017	Microsoft-Windows-TaskScheduler/Maintenance	924	1980	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:01:59 PM			microsoft-windows-taskscheduler/maintenance	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info	Maintenance wakeup requested	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Maintenance Task "NT TASK\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical" requests computer wakeup during next regular maintenance run.	808	0		3	808	0	576460752303423488	3	Microsoft-Windows-TaskScheduler	de7b24ea-73c8-4a09-985d-5bdadcfa9017	Microsoft-Windows-TaskScheduler/Maintenance	924	1816	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:01:59 PM			microsoft-windows-taskscheduler/maintenance	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info	Maintenance wakeup requested	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Maintenance Task "NT TASK\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical" requests computer wakeup during next regular maintenance run.	808	0		3	808	0	576460752303423488	2	Microsoft-Windows-TaskScheduler	de7b24ea-73c8-4a09-985d-5bdadcfa9017	Microsoft-Windows-TaskScheduler/Maintenance	916	1828	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:17 PM			microsoft-windows-taskscheduler/maintenance	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info	Maintenance wakeup requested	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Maintenance Task "NT TASK\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical" requests computer wakeup during next regular maintenance run.	808	0		3	808	0	576460752303423488	1	Microsoft-Windows-TaskScheduler	de7b24ea-73c8-4a09-985d-5bdadcfa9017	Microsoft-Windows-TaskScheduler/Maintenance	916	1828	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:17 PM			microsoft-windows-taskscheduler/maintenance	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info	Maintenance wakeup requested	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]