Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
Capability change on {8B4D1A22-D156-4A7F-97E2-B28E3EAB5C80} (0x6008002000000 Family: V4 Capability: Internet ChangeReason: ActiveDnsProbeSucceeded)	4042	0		4	0	0	4611686018427387936	57	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1168	1984	n-h1-764486-2.cbci-764486-2.local	S-1-5-20	1/25/2021 1:09:12 PM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {8B4D1A22-D156-4A7F-97E2-B28E3EAB5C80} (0x6008002000000 Family: V4 Capability: Internet ChangeReason: ActiveDnsProbeSucceeded)	4042	0		4	0	0	4611686018427387936	56	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1328	1360	n-h1-764486-2	S-1-5-20	1/25/2021 12:25:22 PM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {8B4D1A22-D156-4A7F-97E2-B28E3EAB5C80} (0x6008002000000 Family: V4 Capability: None ChangeReason: CapabilityReset)	4042	0		4	0	0	4611686018427387936	55	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1732	1816	WIN-5T344G8GM1H	S-1-5-20	1/25/2021 12:24:53 PM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {8B4D1A22-D156-4A7F-97E2-B28E3EAB5C80} (0x6008002000000 Family: V4 Capability: Internet ChangeReason: ActiveHttpProbeSucceeded)	4042	0		4	0	0	4611686018427387936	54	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1732	1796	WIN-5T344G8GM1H	S-1-5-20	1/25/2021 12:23:55 PM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: None ChangeReason: NoAddress)	4042	0		4	0	0	4611686018427387936	53	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1392	2104	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:48:09 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V4 Capability: None ChangeReason: NoAddress)	4042	0		4	0	0	4611686018427387936	52	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1392	1532	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:44:18 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: Local ChangeReason: ActiveHttpProbeFailedButDnsSucceeded)	4042	0		4	0	0	4611686018427387936	51	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1392	1532	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:42:52 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: Local ChangeReason: ActiveHttpProbeFailedButDnsSucceeded)	4042	0		4	0	0	4611686018427387936	50	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1392	1708	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:41:51 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: Local ChangeReason: PassivePacketHops)	4042	0		4	0	0	4611686018427387936	49	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1392	1532	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:41:30 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V4 Capability: Internet ChangeReason: ActiveDnsProbeSucceeded)	4042	0		4	0	0	4611686018427387936	48	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1392	1508	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:41:29 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: Local ChangeReason: ActiveHttpProbeFailedButDnsSucceeded)	4042	0		4	0	0	4611686018427387936	47	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1524	1772	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:28:37 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: Local ChangeReason: ActiveHttpProbeFailedButDnsSucceeded)	4042	0		4	0	0	4611686018427387936	46	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1524	1664	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:27:36 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: Local ChangeReason: PassivePacketHops)	4042	0		4	0	0	4611686018427387936	45	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1524	1772	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:27:16 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V4 Capability: Internet ChangeReason: ActiveDnsProbeSucceeded)	4042	0		4	0	0	4611686018427387936	44	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1524	1756	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:27:15 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: Local ChangeReason: ActiveHttpProbeFailedButDnsSucceeded)	4042	0		4	0	0	4611686018427387936	43	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1404	1736	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:27:01 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: Local ChangeReason: PassivePacketHops)	4042	0		4	0	0	4611686018427387936	42	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1404	1824	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:26:41 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V4 Capability: Internet ChangeReason: ActiveDnsProbeSucceeded)	4042	0		4	0	0	4611686018427387936	41	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1404	1816	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:26:40 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: Local ChangeReason: ActiveHttpProbeFailedButDnsSucceeded)	4042	0		4	0	0	4611686018427387936	40	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1464	1928	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:24:22 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: Local ChangeReason: ActiveHttpProbeFailedButDnsSucceeded)	4042	0		4	0	0	4611686018427387936	39	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1464	1852	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:23:21 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: Local ChangeReason: PassivePacketHops)	4042	0		4	0	0	4611686018427387936	38	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1464	1812	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:23:01 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V4 Capability: Internet ChangeReason: ActiveDnsProbeSucceeded)	4042	0		4	0	0	4611686018427387936	37	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1464	1920	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:23:00 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: Local ChangeReason: ActiveHttpProbeFailedButDnsSucceeded)	4042	0		4	0	0	4611686018427387936	36	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1460	1928	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:20:25 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: Local ChangeReason: ActiveHttpProbeFailed)	4042	0		4	0	0	4611686018427387936	35	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1460	1928	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:19:28 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: Local ChangeReason: PassivePacketHops)	4042	0		4	0	0	4611686018427387936	34	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1460	1908	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:19:19 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V4 Capability: Internet ChangeReason: ActiveDnsProbeSucceeded)	4042	0		4	0	0	4611686018427387936	33	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1460	1912	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:19:19 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: None ChangeReason: CapabilityReset)	4042	0		4	0	0	4611686018427387936	32	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1460	1672	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:19:16 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V4 Capability: None ChangeReason: NoAddress)	4042	0		4	0	0	4611686018427387936	31	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1460	1928	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:11:38 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: Local ChangeReason: ActiveHttpProbeFailedButDnsSucceeded)	4042	0		4	0	0	4611686018427387936	30	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1460	1928	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:56:10 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: Local ChangeReason: ActiveHttpProbeFailedButDnsSucceeded)	4042	0		4	0	0	4611686018427387936	29	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1460	1664	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:55:10 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: Local ChangeReason: PassivePacketHops)	4042	0		4	0	0	4611686018427387936	28	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1460	1728	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:54:49 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V4 Capability: Internet ChangeReason: ActiveDnsProbeSucceeded)	4042	0		4	0	0	4611686018427387936	27	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1460	1908	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:54:48 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: Local ChangeReason: ActiveHttpProbeFailedButDnsSucceeded)	4042	0		4	0	0	4611686018427387936	26	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1524	1900	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:51:17 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: Local ChangeReason: ActiveHttpProbeFailedButDnsSucceeded)	4042	0		4	0	0	4611686018427387936	25	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1524	1872	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:50:23 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: Local ChangeReason: PassivePacketHops)	4042	0		4	0	0	4611686018427387936	24	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1524	2040	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:50:03 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V4 Capability: Internet ChangeReason: ActiveDnsProbeSucceeded)	4042	0		4	0	0	4611686018427387936	23	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1524	1908	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:50:02 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: Local ChangeReason: ActiveHttpProbeFailedButDnsSucceeded)	4042	0		4	0	0	4611686018427387936	22	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1332	1728	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:25:02 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: Local ChangeReason: PassivePacketHops)	4042	0		4	0	0	4611686018427387936	21	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1332	2544	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:24:11 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V6 Capability: None ChangeReason: ActiveHttpProbeFailed)	4042	0		4	0	0	4611686018427387936	20	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1332	2544	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:24:09 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {518CDFA4-5492-4D9E-BEAA-908825A4A289} (0x6008002000000 Family: V4 Capability: Internet ChangeReason: ActiveDnsProbeSucceeded)	4042	0		4	0	0	4611686018427387936	19	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1332	2552	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:24:00 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {5C5D9A3A-40D7-47B4-B915-59C9831563DF} (0x6008001000000 Family: V6 Capability: Local ChangeReason: ActiveHttpProbeFailedButDnsSucceeded)	4042	0		4	0	0	4611686018427387936	18	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1420	1804	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 6:07:39 PM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {5C5D9A3A-40D7-47B4-B915-59C9831563DF} (0x6008001000000 Family: V6 Capability: Local ChangeReason: ActiveHttpProbeFailedButDnsSucceeded)	4042	0		4	0	0	4611686018427387936	17	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1420	1804	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 6:06:46 PM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {5C5D9A3A-40D7-47B4-B915-59C9831563DF} (0x6008001000000 Family: V6 Capability: Local ChangeReason: PassivePacketHops)	4042	0		4	0	0	4611686018427387936	16	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1420	1832	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 6:06:25 PM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {5C5D9A3A-40D7-47B4-B915-59C9831563DF} (0x6008001000000 Family: V4 Capability: Internet ChangeReason: ActiveDnsProbeSucceeded)	4042	0		4	0	0	4611686018427387936	15	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1420	1952	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 6:06:24 PM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {5C5D9A3A-40D7-47B4-B915-59C9831563DF} (0x6008001000000 Family: V6 Capability: Local ChangeReason: ActiveHttpProbeFailedButDnsSucceeded)	4042	0		4	0	0	4611686018427387936	14	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1400	1800	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 5:43:29 PM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {5C5D9A3A-40D7-47B4-B915-59C9831563DF} (0x6008001000000 Family: V6 Capability: Local ChangeReason: ActiveHttpProbeFailedButDnsSucceeded)	4042	0		4	0	0	4611686018427387936	13	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1400	1800	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 5:42:32 PM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {5C5D9A3A-40D7-47B4-B915-59C9831563DF} (0x6008001000000 Family: V6 Capability: Local ChangeReason: PassivePacketHops)	4042	0		4	0	0	4611686018427387936	12	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1400	1780	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 5:42:12 PM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {5C5D9A3A-40D7-47B4-B915-59C9831563DF} (0x6008001000000 Family: V4 Capability: Internet ChangeReason: ActiveDnsProbeSucceeded)	4042	0		4	0	0	4611686018427387936	11	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1400	1776	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 5:42:11 PM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {5C5D9A3A-40D7-47B4-B915-59C9831563DF} (0x6008001000000 Family: V6 Capability: Local ChangeReason: ActiveHttpProbeFailedButDnsSucceeded)	4042	0		4	0	0	4611686018427387936	10	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1140	1736	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 5:03:20 PM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {5C5D9A3A-40D7-47B4-B915-59C9831563DF} (0x6008001000000 Family: V6 Capability: Local ChangeReason: ActiveHttpProbeFailedButDnsSucceeded)	4042	0		4	0	0	4611686018427387936	9	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1140	1172	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 5:02:18 PM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {5C5D9A3A-40D7-47B4-B915-59C9831563DF} (0x6008001000000 Family: V6 Capability: Local ChangeReason: PassivePacketHops)	4042	0		4	0	0	4611686018427387936	8	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1140	1392	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 5:01:59 PM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {5C5D9A3A-40D7-47B4-B915-59C9831563DF} (0x6008001000000 Family: V4 Capability: Internet ChangeReason: ActiveHttpProbeSucceeded)	4042	0		4	0	0	4611686018427387936	7	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1140	1400	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 5:01:59 PM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {5C5D9A3A-40D7-47B4-B915-59C9831563DF} (0x6008001000000 Family: V6 Capability: None ChangeReason: CapabilityReset)	4042	0		4	0	0	4611686018427387936	6	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1644	2568	WIN-PD8DQPRRTAO	S-1-5-20	1/16/2018 9:01:42 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {5C5D9A3A-40D7-47B4-B915-59C9831563DF} (0x6008001000000 Family: V4 Capability: None ChangeReason: CapabilityReset)	4042	0		4	0	0	4611686018427387936	5	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1644	2568	WIN-PD8DQPRRTAO	S-1-5-20	1/16/2018 9:01:42 AM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {5C5D9A3A-40D7-47B4-B915-59C9831563DF} (0x6008001000000 Family: V6 Capability: Local ChangeReason: PassivePacketHops)	4042	0		4	0	0	4611686018427387936	4	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1644	1812	WIN-PD8DQPRRTAO	S-1-5-20	1/16/2018 5:01:31 PM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {5C5D9A3A-40D7-47B4-B915-59C9831563DF} (0x6008001000000 Family: V4 Capability: Local ChangeReason: PassivePacketHops)	4042	0		4	0	0	4611686018427387936	3	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1644	1812	WIN-PD8DQPRRTAO	S-1-5-20	1/16/2018 5:01:31 PM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {5C5D9A3A-40D7-47B4-B915-59C9831563DF} (0x6008001000000 Family: V4 Capability: None ChangeReason: ActiveHttpProbeFailed)	4042	0		4	0	0	4611686018427387936	2	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1644	1808	WIN-PD8DQPRRTAO	S-1-5-20	1/16/2018 5:01:25 PM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Capability change on {5C5D9A3A-40D7-47B4-B915-59C9831563DF} (0x6008001000000 Family: V6 Capability: None ChangeReason: ActiveHttpProbeFailed)	4042	0		4	0	0	4611686018427387936	1	Microsoft-Windows-NCSI	314de49f-ce63-4779-ba2b-d616f6963a88	Microsoft-Windows-NCSI/Operational	1644	2568	WIN-PD8DQPRRTAO	S-1-5-20	1/16/2018 5:01:21 PM			microsoft-windows-ncsi/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]