MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
A Terminal Services session change was processed. Reason: A session was connected to the console terminal10060400-9223372036854775776156Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational2012496n-h1-768852-4.cbci-768852-4.localS-1-5-191/14/2021 3:40:32 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an L2 adapter arrival Interface: {F53565D3-0B5E-4FF7-B3BD-67E89DEC0939} Type: Ethernet.10090400-9223372036854775776155Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational2012496n-h1-768852-4.cbci-768852-4.localS-1-5-191/14/2021 3:40:28 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an NDIS adapter arrival Interface: {F53565D3-0B5E-4FF7-B3BD-67E89DEC0939} Type: Ethernet.10260400-9223372036854775776154Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational2012496n-h1-768852-4.cbci-768852-4.localS-1-5-191/14/2021 3:40:28 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete WCM Service Startup100020400-9223372036854775808153Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational20122032n-h1-768852-4.cbci-768852-4.localS-1-5-191/14/2021 3:40:28 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an L2 adapter arrival Interface: {6B05CCB8-F702-46A4-98AF-90082B052329} Type: Ethernet.10090400-9223372036854775776152Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational2012496n-h1-768852-4.cbci-768852-4.localS-1-5-191/14/2021 3:40:28 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientRegister - Status [0x0]40270400-9223372036854775776151Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational20122032n-h1-768852-4.cbci-768852-4.localS-1-5-191/14/2021 3:40:28 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an NDIS adapter arrival Interface: {6B05CCB8-F702-46A4-98AF-90082B052329} Type: Ethernet.10260400-9223372036854775776150Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational2012496n-h1-768852-4.cbci-768852-4.localS-1-5-191/14/2021 3:40:28 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start WCM Service Startup100010400-9223372036854775808149Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational20122032n-h1-768852-4.cbci-768852-4.localS-1-5-191/14/2021 3:40:28 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete Service Shutdown100040400-9223372036854775808148Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational11042084n-h1-768852-4S-1-5-191/14/2021 3:40:06 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientUnregister - Status [0x0]40280400-9223372036854775776147Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational11042084n-h1-768852-4S-1-5-191/14/2021 3:40:06 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start Service Shutdown100030400-9223372036854775808146Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational11042084n-h1-768852-4S-1-5-191/14/2021 3:40:06 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an L2 adapter arrival Interface: {6B05CCB8-F702-46A4-98AF-90082B052329} Type: Ethernet.10090400-9223372036854775776145Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational11042072n-h1-768852-4S-1-5-191/14/2021 3:01:55 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an NDIS adapter arrival Interface: {6B05CCB8-F702-46A4-98AF-90082B052329} Type: Ethernet.10260400-9223372036854775776144Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational11042072n-h1-768852-4S-1-5-191/14/2021 3:01:55 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an L2 adapter removal Interface: {6B05CCB8-F702-46A4-98AF-90082B052329} Type: Ethernet.10100400-9223372036854775776143Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational11042072n-h1-768852-4S-1-5-191/14/2021 3:01:55 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an NDIS adapter removal Interface: {6B05CCB8-F702-46A4-98AF-90082B052329} Type: Ethernet.10270400-9223372036854775776142Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational11042072n-h1-768852-4S-1-5-191/14/2021 3:01:55 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A session was connected to the console terminal10060400-9223372036854775776141Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational11042072n-h1-768852-4S-1-5-191/14/2021 2:59:00 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an L2 adapter arrival Interface: {F53565D3-0B5E-4FF7-B3BD-67E89DEC0939} Type: Ethernet.10090400-9223372036854775776140Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational11042072n-h1-768852-4S-1-5-191/14/2021 2:58:49 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an NDIS adapter arrival Interface: {F53565D3-0B5E-4FF7-B3BD-67E89DEC0939} Type: Ethernet.10260400-9223372036854775776139Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational11042072n-h1-768852-4S-1-5-191/14/2021 2:58:49 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete WCM Service Startup100020400-9223372036854775808138Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational11042056n-h1-768852-4S-1-5-191/14/2021 2:58:49 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an L2 adapter arrival Interface: {6B05CCB8-F702-46A4-98AF-90082B052329} Type: Ethernet.10090400-9223372036854775776137Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational11042072n-h1-768852-4S-1-5-191/14/2021 2:58:49 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientRegister - Status [0x0]40270400-9223372036854775776136Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational11042056n-h1-768852-4S-1-5-191/14/2021 2:58:49 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an NDIS adapter arrival Interface: {6B05CCB8-F702-46A4-98AF-90082B052329} Type: Ethernet.10260400-9223372036854775776135Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational11042072n-h1-768852-4S-1-5-191/14/2021 2:58:49 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start WCM Service Startup100010400-9223372036854775808134Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational11042056n-h1-768852-4S-1-5-191/14/2021 2:58:49 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete Service Shutdown100040400-9223372036854775808133Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18521956n-h1-768852-4S-1-5-191/14/2021 2:58:17 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientUnregister - Status [0x0]40280400-9223372036854775776132Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18521956WIN-5T344G8GM1HS-1-5-191/14/2021 2:58:17 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start Service Shutdown100030400-9223372036854775808131Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18521956WIN-5T344G8GM1HS-1-5-191/14/2021 2:58:17 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCM Preferred Order List: 0: {6B05CCB8-F702-46A4-98AF-90082B052329}, 6b05ccb8-f702-46a4-98af-90082b052329, 1 1: {F53565D3-0B5E-4FF7-B3BD-67E89DEC0939}, f53565d3-0b5e-4ff7-b3bd-67e89dec0939, 1 2: {518CDFA4-5492-4D9E-BEAA-908825A4A289}, 518cdfa4-5492-4d9e-beaa-908825a4a289, 1 3: {5C5D9A3A-40D7-47B4-B915-59C9831563DF}, 5c5d9a3a-40d7-47b4-b915-59c9831563df, 1 10200400-9223372036854775776130Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18521892WIN-5T344G8GM1HS-1-5-191/14/2021 2:57:18 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an L2 adapter arrival Interface: {6B05CCB8-F702-46A4-98AF-90082B052329} Type: Ethernet.10090400-9223372036854775776129Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18521892WIN-5T344G8GM1HS-1-5-191/14/2021 2:57:18 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an NDIS adapter arrival Interface: {6B05CCB8-F702-46A4-98AF-90082B052329} Type: Ethernet.10260400-9223372036854775776128Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18521892WIN-5T344G8GM1HS-1-5-191/14/2021 2:57:18 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCM Preferred Order List: 0: {F53565D3-0B5E-4FF7-B3BD-67E89DEC0939}, f53565d3-0b5e-4ff7-b3bd-67e89dec0939, 1 1: {518CDFA4-5492-4D9E-BEAA-908825A4A289}, 518cdfa4-5492-4d9e-beaa-908825a4a289, 1 2: {5C5D9A3A-40D7-47B4-B915-59C9831563DF}, 5c5d9a3a-40d7-47b4-b915-59c9831563df, 1 10200400-9223372036854775776127Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18521892WIN-5T344G8GM1HS-1-5-191/14/2021 2:57:18 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete WCM Service Startup100020400-9223372036854775808126Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18521880WIN-5T344G8GM1HS-1-5-191/14/2021 2:57:18 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an L2 adapter arrival Interface: {F53565D3-0B5E-4FF7-B3BD-67E89DEC0939} Type: Ethernet.10090400-9223372036854775776125Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18521892WIN-5T344G8GM1HS-1-5-191/14/2021 2:57:18 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an NDIS adapter arrival Interface: {F53565D3-0B5E-4FF7-B3BD-67E89DEC0939} Type: Ethernet.10260400-9223372036854775776124Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18521892WIN-5T344G8GM1HS-1-5-191/14/2021 2:57:18 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientRegister - Status [0x0]40270400-9223372036854775776123Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18521880WIN-5T344G8GM1HS-1-5-191/14/2021 2:57:18 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start WCM Service Startup100010400-9223372036854775808122Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18521880WIN-5T344G8GM1HS-1-5-191/14/2021 2:57:18 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete Service Shutdown100040400-9223372036854775808121Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational17241892WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:13 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientUnregister - Status [0x0]40280400-9223372036854775776120Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational17241892WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:13 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start Service Shutdown100030400-9223372036854775808119Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational17241892WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:13 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A user has logged off the session10060400-9223372036854775776118Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational17241816WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:12 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A user has logged on to the session10060400-9223372036854775776117Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational17241816WIN-5T344G8GM1HS-1-5-191/19/2018 9:41:33 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A session was connected to the console terminal10060400-9223372036854775776116Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational17241816WIN-5T344G8GM1HS-1-5-191/19/2018 9:41:30 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete WCM Service Startup100020400-9223372036854775808115Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational17241792WIN-5T344G8GM1HS-1-5-191/19/2018 9:41:30 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientRegister - Status [0x0]40270400-9223372036854775776114Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational17241792WIN-5T344G8GM1HS-1-5-191/19/2018 9:41:30 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an L2 adapter arrival Interface: {518CDFA4-5492-4D9E-BEAA-908825A4A289} Type: Ethernet.10090400-9223372036854775776113Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational17241816WIN-5T344G8GM1HS-1-5-191/19/2018 9:41:30 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an NDIS adapter arrival Interface: {518CDFA4-5492-4D9E-BEAA-908825A4A289} Type: Ethernet.10260400-9223372036854775776112Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational17241816WIN-5T344G8GM1HS-1-5-191/19/2018 9:41:30 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start WCM Service Startup100010400-9223372036854775808111Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational17241792WIN-5T344G8GM1HS-1-5-191/19/2018 9:41:29 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete Service Shutdown100040400-9223372036854775808110Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational15321640WIN-5T344G8GM1HS-1-5-191/19/2018 9:41:15 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientUnregister - Status [0x0]40280400-9223372036854775776109Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational15321640WIN-5T344G8GM1HS-1-5-191/19/2018 9:41:15 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start Service Shutdown100030400-9223372036854775808108Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational15321640WIN-5T344G8GM1HS-1-5-191/19/2018 9:41:15 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A user has logged off the session10060400-9223372036854775776107Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational15321624WIN-5T344G8GM1HS-1-5-191/19/2018 9:40:27 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A user has logged on to the session10060400-9223372036854775776106Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational15321624WIN-5T344G8GM1HS-1-5-191/19/2018 9:27:19 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A session was connected to the console terminal10060400-9223372036854775776105Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational15321624WIN-5T344G8GM1HS-1-5-191/19/2018 9:27:17 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete WCM Service Startup100020400-9223372036854775808104Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational15321604WIN-5T344G8GM1HS-1-5-191/19/2018 9:27:15 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an L2 adapter arrival Interface: {518CDFA4-5492-4D9E-BEAA-908825A4A289} Type: Ethernet.10090400-9223372036854775776103Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational15321624WIN-5T344G8GM1HS-1-5-191/19/2018 9:27:15 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an NDIS adapter arrival Interface: {518CDFA4-5492-4D9E-BEAA-908825A4A289} Type: Ethernet.10260400-9223372036854775776102Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational15321624WIN-5T344G8GM1HS-1-5-191/19/2018 9:27:15 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientRegister - Status [0x0]40270400-9223372036854775776101Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational15321604WIN-5T344G8GM1HS-1-5-191/19/2018 9:27:15 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start WCM Service Startup100010400-9223372036854775808100Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational15321604WIN-5T344G8GM1HS-1-5-191/19/2018 9:27:15 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete Service Shutdown100040400-922337203685477580899Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14201556WIN-5T344G8GM1HS-1-5-191/19/2018 9:27:00 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientUnregister - Status [0x0]40280400-922337203685477577698Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14201556WIN-5T344G8GM1HS-1-5-191/19/2018 9:27:00 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start Service Shutdown100030400-922337203685477580897Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14201556WIN-5T344G8GM1HS-1-5-191/19/2018 9:27:00 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete WCM Service Startup100020400-922337203685477580896Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14201492WIN-5T344G8GM1HS-1-5-191/19/2018 9:26:40 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an L2 adapter arrival Interface: {518CDFA4-5492-4D9E-BEAA-908825A4A289} Type: Ethernet.10090400-922337203685477577695Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14201540WIN-5T344G8GM1HS-1-5-191/19/2018 9:26:40 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an NDIS adapter arrival Interface: {518CDFA4-5492-4D9E-BEAA-908825A4A289} Type: Ethernet.10260400-922337203685477577694Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14201540WIN-5T344G8GM1HS-1-5-191/19/2018 9:26:40 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientRegister - Status [0x0]40270400-922337203685477577693Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14201492WIN-5T344G8GM1HS-1-5-191/19/2018 9:26:40 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start WCM Service Startup100010400-922337203685477580892Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14201492WIN-5T344G8GM1HS-1-5-191/19/2018 9:26:40 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete Service Shutdown100040400-922337203685477580891Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14721692WIN-5T344G8GM1HS-1-5-191/19/2018 9:26:23 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientUnregister - Status [0x0]40280400-922337203685477577690Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14721692WIN-5T344G8GM1HS-1-5-191/19/2018 9:26:23 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start Service Shutdown100030400-922337203685477580889Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14721692WIN-5T344G8GM1HS-1-5-191/19/2018 9:26:23 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A user has logged off the session10060400-922337203685477577688Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14721688WIN-5T344G8GM1HS-1-5-191/19/2018 9:26:19 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A user has logged on to the session10060400-922337203685477577687Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14721688WIN-5T344G8GM1HS-1-5-191/19/2018 9:23:05 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A session was connected to the console terminal10060400-922337203685477577686Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14721688WIN-5T344G8GM1HS-1-5-191/19/2018 9:23:03 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete WCM Service Startup100020400-922337203685477580885Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14721528WIN-5T344G8GM1HS-1-5-191/19/2018 9:23:00 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an L2 adapter arrival Interface: {518CDFA4-5492-4D9E-BEAA-908825A4A289} Type: Ethernet.10090400-922337203685477577684Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14721688WIN-5T344G8GM1HS-1-5-191/19/2018 9:23:00 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an NDIS adapter arrival Interface: {518CDFA4-5492-4D9E-BEAA-908825A4A289} Type: Ethernet.10260400-922337203685477577683Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14721688WIN-5T344G8GM1HS-1-5-191/19/2018 9:23:00 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientRegister - Status [0x0]40270400-922337203685477577682Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14721528WIN-5T344G8GM1HS-1-5-191/19/2018 9:23:00 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start WCM Service Startup100010400-922337203685477580881Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14721528WIN-5T344G8GM1HS-1-5-191/19/2018 9:23:00 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete Service Shutdown100040400-922337203685477580880Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14361648WIN-5T344G8GM1HS-1-5-191/19/2018 9:22:50 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientUnregister - Status [0x0]40280400-922337203685477577679Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14361648WIN-5T344G8GM1HS-1-5-191/19/2018 9:22:50 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start Service Shutdown100030400-922337203685477580878Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14361648WIN-5T344G8GM1HS-1-5-191/19/2018 9:22:50 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A user has logged off the session10060400-922337203685477577677Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14361636WIN-5T344G8GM1HS-1-5-191/19/2018 9:22:48 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an L2 adapter arrival Interface: {518CDFA4-5492-4D9E-BEAA-908825A4A289} Type: Ethernet.10090400-922337203685477577676Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14361636WIN-5T344G8GM1HS-1-5-191/19/2018 9:19:17 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an NDIS adapter arrival Interface: {518CDFA4-5492-4D9E-BEAA-908825A4A289} Type: Ethernet.10260400-922337203685477577675Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14361636WIN-5T344G8GM1HS-1-5-191/19/2018 9:19:17 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an L2 adapter removal Interface: {518CDFA4-5492-4D9E-BEAA-908825A4A289} Type: Ethernet.10100400-922337203685477577674Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14361636WIN-5T344G8GM1HS-1-5-191/19/2018 9:19:16 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an NDIS adapter removal Interface: {518CDFA4-5492-4D9E-BEAA-908825A4A289} Type: Ethernet.10270400-922337203685477577673Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14361636WIN-5T344G8GM1HS-1-5-191/19/2018 9:19:16 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A user has logged on to the session10060400-922337203685477577672Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14361636WIN-5T344G8GM1HS-1-5-191/19/2018 8:54:50 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A session was connected to the console terminal10060400-922337203685477577671Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14361636WIN-5T344G8GM1HS-1-5-191/19/2018 8:54:49 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete WCM Service Startup100020400-922337203685477580870Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14361620WIN-5T344G8GM1HS-1-5-191/19/2018 8:54:48 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientRegister - Status [0x0]40270400-922337203685477577669Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14361620WIN-5T344G8GM1HS-1-5-191/19/2018 8:54:48 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an L2 adapter arrival Interface: {518CDFA4-5492-4D9E-BEAA-908825A4A289} Type: Ethernet.10090400-922337203685477577668Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14361636WIN-5T344G8GM1HS-1-5-191/19/2018 8:54:48 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an NDIS adapter arrival Interface: {518CDFA4-5492-4D9E-BEAA-908825A4A289} Type: Ethernet.10260400-922337203685477577667Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14361636WIN-5T344G8GM1HS-1-5-191/19/2018 8:54:48 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start WCM Service Startup100010400-922337203685477580866Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14361620WIN-5T344G8GM1HS-1-5-191/19/2018 8:54:48 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete Service Shutdown100040400-922337203685477580865Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational15121700WIN-5T344G8GM1HS-1-5-191/19/2018 8:54:40 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientUnregister - Status [0x0]40280400-922337203685477577664Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational15121700WIN-5T344G8GM1HS-1-5-191/19/2018 8:54:40 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start Service Shutdown100030400-922337203685477580863Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational15121700WIN-5T344G8GM1HS-1-5-191/19/2018 8:54:40 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A user has logged off the session10060400-922337203685477577662Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational15121688WIN-5T344G8GM1HS-1-5-191/19/2018 8:54:39 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A user has logged on to the session10060400-922337203685477577661Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational15121688WIN-5T344G8GM1HS-1-5-191/19/2018 8:50:56 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A session was connected to the console terminal10060400-922337203685477577660Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational15121688WIN-5T344G8GM1HS-1-5-191/19/2018 8:50:54 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete WCM Service Startup100020400-922337203685477580859Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational15121648WIN-5T344G8GM1HS-1-5-191/19/2018 8:50:02 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an L2 adapter arrival Interface: {518CDFA4-5492-4D9E-BEAA-908825A4A289} Type: Ethernet.10090400-922337203685477577658Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational15121688WIN-5T344G8GM1HS-1-5-191/19/2018 8:50:02 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientRegister - Status [0x0]40270400-922337203685477577657Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational15121648WIN-5T344G8GM1HS-1-5-191/19/2018 8:50:02 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an NDIS adapter arrival Interface: {518CDFA4-5492-4D9E-BEAA-908825A4A289} Type: Ethernet.10260400-922337203685477577656Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational15121688WIN-5T344G8GM1HS-1-5-191/19/2018 8:50:02 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start WCM Service Startup100010400-922337203685477580855Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational15121648WIN-5T344G8GM1HS-1-5-191/19/2018 8:50:02 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete Service Shutdown100040400-922337203685477580854Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13241452WIN-5T344G8GM1HS-1-5-191/19/2018 8:49:46 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientUnregister - Status [0x0]40280400-922337203685477577653Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13241452WIN-5T344G8GM1HS-1-5-191/19/2018 8:49:46 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start Service Shutdown100030400-922337203685477580852Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13241452WIN-5T344G8GM1HS-1-5-191/19/2018 8:49:46 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A user has logged off the session10060400-922337203685477577651Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13241440WIN-5T344G8GM1HS-1-5-191/19/2018 8:45:56 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A user has logged on to the session10060400-922337203685477577650Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13241440WIN-5T344G8GM1HS-1-5-191/19/2018 8:24:01 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A session was connected to the console terminal10060400-922337203685477577649Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13241440WIN-5T344G8GM1HS-1-5-191/19/2018 8:24:00 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCM Preferred Order List: 0: {518CDFA4-5492-4D9E-BEAA-908825A4A289}, 518cdfa4-5492-4d9e-beaa-908825a4a289, 1 1: {5C5D9A3A-40D7-47B4-B915-59C9831563DF}, 5c5d9a3a-40d7-47b4-b915-59c9831563df, 1 10200400-922337203685477577648Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13241440WIN-5T344G8GM1HS-1-5-191/19/2018 8:23:57 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an L2 adapter arrival Interface: {518CDFA4-5492-4D9E-BEAA-908825A4A289} Type: Ethernet.10090400-922337203685477577647Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13241440WIN-5T344G8GM1HS-1-5-191/19/2018 8:23:57 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an NDIS adapter arrival Interface: {518CDFA4-5492-4D9E-BEAA-908825A4A289} Type: Ethernet.10260400-922337203685477577646Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13241440WIN-5T344G8GM1HS-1-5-191/19/2018 8:23:57 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete WCM Service Startup100020400-922337203685477580845Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13241388WIN-5T344G8GM1HS-1-5-191/19/2018 8:23:55 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientRegister - Status [0x0]40270400-922337203685477577644Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13241388WIN-5T344G8GM1HS-1-5-191/19/2018 8:23:55 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start WCM Service Startup100010400-922337203685477580843Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13241388WIN-5T344G8GM1HS-1-5-191/19/2018 8:23:55 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete Service Shutdown100040400-922337203685477580842Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13961712WIN-5T344G8GM1HS-1-5-191/16/2018 6:44:39 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientUnregister - Status [0x0]40280400-922337203685477577641Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13961712WIN-5T344G8GM1HS-1-5-191/16/2018 6:44:39 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start Service Shutdown100030400-922337203685477580840Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13961712WIN-5T344G8GM1HS-1-5-191/16/2018 6:44:39 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A user has logged off the session10060400-922337203685477577639Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13961688WIN-5T344G8GM1HS-1-5-191/16/2018 6:44:38 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A user has logged on to the session10060400-922337203685477577638Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13961688WIN-5T344G8GM1HS-1-5-191/16/2018 6:07:02 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A session was connected to the console terminal10060400-922337203685477577637Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13961688WIN-5T344G8GM1HS-1-5-191/16/2018 6:07:01 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete WCM Service Startup100020400-922337203685477580836Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13961620WIN-5T344G8GM1HS-1-5-191/16/2018 6:06:24 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an L2 adapter arrival Interface: {5C5D9A3A-40D7-47B4-B915-59C9831563DF} Type: Ethernet.10090400-922337203685477577635Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13961688WIN-5T344G8GM1HS-1-5-191/16/2018 6:06:24 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an NDIS adapter arrival Interface: {5C5D9A3A-40D7-47B4-B915-59C9831563DF} Type: Ethernet.10260400-922337203685477577634Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13961688WIN-5T344G8GM1HS-1-5-191/16/2018 6:06:24 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientRegister - Status [0x0]40270400-922337203685477577633Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13961620WIN-5T344G8GM1HS-1-5-191/16/2018 6:06:24 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start WCM Service Startup100010400-922337203685477580832Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational13961620WIN-5T344G8GM1HS-1-5-191/16/2018 6:06:24 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete Service Shutdown100040400-922337203685477580831Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14081728WIN-5T344G8GM1HS-1-5-191/16/2018 6:06:09 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientUnregister - Status [0x0]40280400-922337203685477577630Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14081728WIN-5T344G8GM1HS-1-5-191/16/2018 6:06:09 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start Service Shutdown100030400-922337203685477580829Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14081728WIN-5T344G8GM1HS-1-5-191/16/2018 6:06:09 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A user has logged off the session10060400-922337203685477577628Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14081700WIN-5T344G8GM1HS-1-5-191/16/2018 6:02:38 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A user has logged on to the session10060400-922337203685477577627Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14081700WIN-5T344G8GM1HS-1-5-191/16/2018 5:43:07 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A session was connected to the console terminal10060400-922337203685477577626Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14081700WIN-5T344G8GM1HS-1-5-191/16/2018 5:43:05 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete WCM Service Startup100020400-922337203685477580825Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14081668WIN-5T344G8GM1HS-1-5-191/16/2018 5:42:11 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an L2 adapter arrival Interface: {5C5D9A3A-40D7-47B4-B915-59C9831563DF} Type: Ethernet.10090400-922337203685477577624Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14081700WIN-5T344G8GM1HS-1-5-191/16/2018 5:42:11 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an NDIS adapter arrival Interface: {5C5D9A3A-40D7-47B4-B915-59C9831563DF} Type: Ethernet.10260400-922337203685477577623Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14081700WIN-5T344G8GM1HS-1-5-191/16/2018 5:42:11 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientRegister - Status [0x0]40270400-922337203685477577622Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14081668WIN-5T344G8GM1HS-1-5-191/16/2018 5:42:11 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start WCM Service Startup100010400-922337203685477580821Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational14081668WIN-5T344G8GM1HS-1-5-191/16/2018 5:42:11 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete Service Shutdown100040400-922337203685477580820Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18961944WIN-5T344G8GM1HS-1-5-191/16/2018 5:41:55 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientUnregister - Status [0x0]40280400-922337203685477577619Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18961944WIN-5T344G8GM1HS-1-5-191/16/2018 5:41:55 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start Service Shutdown100030400-922337203685477580818Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18961944WIN-5T344G8GM1HS-1-5-191/16/2018 5:41:55 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A user has logged off the session10060400-922337203685477577617Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18961932WIN-5T344G8GM1HS-1-5-191/16/2018 5:35:49 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A user has logged on to the session10060400-922337203685477577616Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18961932WIN-5T344G8GM1HS-1-5-191/16/2018 5:02:11 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A Terminal Services session change was processed. Reason: A session was connected to the console terminal10060400-922337203685477577615Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18961932WIN-5T344G8GM1HS-1-5-191/16/2018 5:02:09 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete WCM Service Startup100020400-922337203685477580814Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18961920WIN-5T344G8GM1HS-1-5-191/16/2018 5:01:59 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientRegister - Status [0x0]40270400-922337203685477577613Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18961920WIN-5T344G8GM1HS-1-5-191/16/2018 5:01:59 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an L2 adapter arrival Interface: {5C5D9A3A-40D7-47B4-B915-59C9831563DF} Type: Ethernet.10090400-922337203685477577612Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18961932WIN-5T344G8GM1HS-1-5-191/16/2018 5:01:59 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an NDIS adapter arrival Interface: {5C5D9A3A-40D7-47B4-B915-59C9831563DF} Type: Ethernet.10260400-922337203685477577611Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18961932WIN-5T344G8GM1HS-1-5-191/16/2018 5:01:59 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start WCM Service Startup100010400-922337203685477580810Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational18961920WIN-5T344G8GM1HS-1-5-191/16/2018 5:01:58 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete Service Shutdown100040400-92233720368547758089Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational16361712WIN-PD8DQPRRTAOS-1-5-191/16/2018 9:01:42 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientUnregister - Status [0x0]40280400-92233720368547757768Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational16361712WIN-PD8DQPRRTAOS-1-5-191/16/2018 9:01:42 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start Service Shutdown100030400-92233720368547758087Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational16361712WIN-PD8DQPRRTAOS-1-5-191/16/2018 9:01:42 AMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCM Preferred Order List: 0: {5C5D9A3A-40D7-47B4-B915-59C9831563DF}, 5c5d9a3a-40d7-47b4-b915-59c9831563df, 1 10200400-92233720368547757766Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational16361704WIN-PD8DQPRRTAOS-1-5-191/16/2018 5:01:21 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an L2 adapter arrival Interface: {5C5D9A3A-40D7-47B4-B915-59C9831563DF} Type: Ethernet.10090400-92233720368547757765Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational16361704WIN-PD8DQPRRTAOS-1-5-191/16/2018 5:01:21 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
CDE reported an NDIS adapter arrival Interface: {5C5D9A3A-40D7-47B4-B915-59C9831563DF} Type: Ethernet.10260400-92233720368547757764Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational16361704WIN-PD8DQPRRTAOS-1-5-191/16/2018 5:01:21 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Complete WCM Service Startup100020400-92233720368547758083Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational16361684WIN-PD8DQPRRTAOS-1-5-191/16/2018 5:01:14 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WcmSvc CmPdcActivationClientRegister - Status [0x0]40270400-92233720368547757762Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational16361684WIN-PD8DQPRRTAOS-1-5-191/16/2018 5:01:14 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WCMSVC: Start WCM Service Startup100010400-92233720368547758081Microsoft-Windows-Wcmsvc67d07935-283a-4791-8f8d-fa9117f3e6f2Microsoft-Windows-Wcmsvc/Operational16361684WIN-PD8DQPRRTAOS-1-5-191/16/2018 5:01:14 PMmicrosoft-windows-wcmsvc/operationalSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]