Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
User config info will be loaded from local machine for this RDP-Tcp connection	20521	0		4	0	0	4611686018427387904	1	Microsoft-Windows-TerminalServices-RemoteConnectionManager	c76baa63-ae81-421c-b425-340b4b24157f	Microsoft-Windows-TerminalServices-RemoteConnectionManager/Admin	3204	4668	hv-osbrick-mast	S-1-5-20	12/6/2021 5:13:02 PM	f420ea07-201f-4ecf-b447-3994855c0000		microsoft-windows-terminalservices-remoteconnectionmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]