Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\{6BA1E30B-53F8-4A9F-A928-3237A5CF362B}\mpsigstub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	21	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	1468	3476	hv-neutron-8227	S-1-5-20	12/22/2021 5:11:00 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-33587df2.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	20	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	2172	2400	hv-neutron-8227	S-1-5-20	12/22/2021 5:10:59 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\97FBC861-4C01-4AD4-BA30-5CEEE3BCDFCE\MpSigStub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	19	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	4344	5076	hv-neutron-8227	S-1-5-20	12/22/2021 5:10:34 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-1ba90bf9.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	18	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	4400	1864	hv-neutron-8227	S-1-5-20	12/22/2021 5:10:27 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\{3BE46480-41D3-4170-B5A5-0E2C8A8FF3D4}\mpsigstub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	17	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	2952	2948	hv-neutron-8227	S-1-5-20	12/22/2021 3:08:38 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-975937da.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	16	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	744	740	WIN-5T344G8GM1H	S-1-5-20	12/22/2021 3:08:35 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\699F2381-EA4A-4E7E-B8A5-1CADC3BB5074\MpSigStub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	15	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	680	684	WIN-5T344G8GM1H	S-1-5-20	12/22/2021 3:08:05 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-4b87b06f.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	14	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	2520	2512	WIN-5T344G8GM1H	S-1-5-20	12/22/2021 3:07:57 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	13	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3860	3864	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 9:41:34 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\{9928164A-1C40-41A4-ACE3-68B9B966670A}\MPSigStub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	12	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	2884	3756	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:39:09 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-c60eba8f.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	11	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	772	1300	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:39:04 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	10	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3944	3948	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 9:27:20 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	9	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3784	3788	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 9:23:06 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	8	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3244	3248	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 8:54:51 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	7	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3272	3276	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 8:50:58 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\{EF31D05B-D72E-4A80-BF6C-1C3609667CE6}\MPSigStub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	6	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3844	4636	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:34:17 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-282ca4d2.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	5	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	4560	3212	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:34:16 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	4	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3456	3460	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 8:24:02 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	3	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3576	3580	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/16/2018 6:07:05 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	2	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3672	3676	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/16/2018 5:43:10 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x10101.	500	0		4	0	0	576460752303423488	1	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	4424	4428	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/16/2018 5:02:17 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]