Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\{5ABCD938-FF6D-479B-87C1-FEF4B79E8EC5}\mpsigstub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	21	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	900	4520	hv-neutron-8232	S-1-5-20	2/17/2022 9:24:01 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-462f6221.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	20	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3360	608	hv-neutron-8232	S-1-5-20	2/17/2022 9:24:00 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\E4FBD275-442C-4FFB-B368-4E7BDC5D952E\MpSigStub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	19	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	1936	4476	hv-neutron-8232	S-1-5-20	2/17/2022 9:23:45 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-86271d31.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	18	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	4796	2908	hv-neutron-8232	S-1-5-20	2/17/2022 9:23:42 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\{BE10E9FF-2820-4E0C-936C-6CB71079E21A}\mpsigstub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	17	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	820	836	WIN-5T344G8GM1H	S-1-5-20	2/17/2022 7:21:36 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-fcf8aaa7.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	16	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	2608	1124	WIN-5T344G8GM1H	S-1-5-20	2/17/2022 7:21:33 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\D8307136-9FBC-4C69-A204-131A348189D9\MpSigStub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	15	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	2960	3004	WIN-5T344G8GM1H	S-1-5-20	2/17/2022 7:21:15 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-92a7983b.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	14	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	1116	2728	WIN-5T344G8GM1H	S-1-5-20	2/17/2022 7:21:11 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	13	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3860	3864	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 9:41:34 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\{9928164A-1C40-41A4-ACE3-68B9B966670A}\MPSigStub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	12	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	2884	3756	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:39:09 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-c60eba8f.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	11	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	772	1300	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:39:04 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	10	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3944	3948	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 9:27:20 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	9	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3784	3788	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 9:23:06 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	8	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3244	3248	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 8:54:51 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	7	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3272	3276	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 8:50:58 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\{EF31D05B-D72E-4A80-BF6C-1C3609667CE6}\MPSigStub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	6	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3844	4636	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:34:17 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-282ca4d2.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	5	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	4560	3212	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:34:16 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	4	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3456	3460	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 8:24:02 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	3	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3576	3580	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/16/2018 6:07:05 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	2	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3672	3676	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/16/2018 5:43:10 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x10101.	500	0		4	0	0	576460752303423488	1	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	4424	4428	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/16/2018 5:02:17 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]