Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\{158E7D56-31C7-434D-B009-DDB234C25421}\mpsigstub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	21	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	1164	824	hv-neutron-8373	S-1-5-20	4/11/2022 8:54:19 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-5b01dece.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	20	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3932	4016	hv-neutron-8373	S-1-5-20	4/11/2022 8:54:12 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\F2F45E22-DE7D-4205-8363-1CDC04EAE035\MpSigStub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	19	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	1376	4404	hv-neutron-8373	S-1-5-20	4/11/2022 8:53:52 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-c7d40aa3.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	18	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3152	2948	hv-neutron-8373	S-1-5-20	4/11/2022 8:53:46 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\{DFCF5998-42D3-4BB6-BCBD-D20AA9E812A1}\mpsigstub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	17	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	1192	1196	WIN-5T344G8GM1H	S-1-5-20	4/11/2022 6:51:46 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-987adce4.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	16	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	684	692	WIN-5T344G8GM1H	S-1-5-20	4/11/2022 6:51:46 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\DCC40BFA-203C-461D-AAFE-4B23D45A9836\MpSigStub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	15	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	836	888	WIN-5T344G8GM1H	S-1-5-20	4/11/2022 6:51:09 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-36c26b6f.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	14	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	2520	2516	WIN-5T344G8GM1H	S-1-5-20	4/11/2022 6:51:01 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	13	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3860	3864	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 9:41:34 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\{9928164A-1C40-41A4-ACE3-68B9B966670A}\MPSigStub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	12	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	2884	3756	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:39:09 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-c60eba8f.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	11	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	772	1300	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:39:04 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	10	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3944	3948	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 9:27:20 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	9	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3784	3788	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 9:23:06 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	8	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3244	3248	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 8:54:51 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	7	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3272	3276	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 8:50:58 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\{EF31D05B-D72E-4A80-BF6C-1C3609667CE6}\MPSigStub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	6	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3844	4636	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:34:17 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-282ca4d2.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	5	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	4560	3212	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:34:16 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	4	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3456	3460	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 8:24:02 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	3	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3576	3580	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/16/2018 6:07:05 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	2	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3672	3676	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/16/2018 5:43:10 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x10101.	500	0		4	0	0	576460752303423488	1	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	4424	4428	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/16/2018 5:02:17 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]