Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
User config info will be loaded from local machine for this RDP-Tcp connection	20521	0		4	0	0	4611686018427387904	1	Microsoft-Windows-TerminalServices-RemoteConnectionManager	c76baa63-ae81-421c-b425-340b4b24157f	Microsoft-Windows-TerminalServices-RemoteConnectionManager/Admin	3168	3700	hv-osbrick-mast	S-1-5-20	1/5/2022 11:06:31 AM	f420abda-1fb2-4e35-8424-7c527a870000		microsoft-windows-terminalservices-remoteconnectionmanager/admin	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]