Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\{8E90AE54-68BE-4AC0-80EC-5D9B2FB913D6}\mpsigstub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	21	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	728	4448	n-h2-811118-1	S-1-5-20	9/27/2021 7:37:53 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-38a25deb.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	20	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	2924	5036	n-h2-811118-1	S-1-5-20	9/27/2021 7:37:52 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\9C0FFDAC-0254-43D3-9745-5F07D2B73E73\MpSigStub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	19	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	4984	4820	n-h2-811118-1	S-1-5-20	9/27/2021 7:37:46 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-c1aeb882.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	18	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	4216	4628	n-h2-811118-1	S-1-5-20	9/27/2021 7:37:39 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\{696B4BAD-29A5-4A42-9CF5-A1BB01C4F2D0}\mpsigstub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	17	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	88	372	WIN-5T344G8GM1H	S-1-5-20	9/27/2021 5:35:52 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-94efb3f8.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	16	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	744	748	WIN-5T344G8GM1H	S-1-5-20	9/27/2021 5:35:51 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\DAEC98C4-3F0B-44E7-9403-83150A1981ED\MpSigStub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	15	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	2968	3004	WIN-5T344G8GM1H	S-1-5-20	9/27/2021 5:35:22 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-81fe66d4.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	14	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	2568	2564	WIN-5T344G8GM1H	S-1-5-20	9/27/2021 5:35:15 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	13	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3860	3864	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 9:41:34 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\{9928164A-1C40-41A4-ACE3-68B9B966670A}\MPSigStub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	12	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	2884	3756	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:39:09 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-c60eba8f.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	11	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	772	1300	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:39:04 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	10	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3944	3948	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 9:27:20 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	9	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3784	3788	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 9:23:06 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	8	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3244	3248	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 8:54:51 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	7	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3272	3276	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 8:50:58 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\{EF31D05B-D72E-4A80-BF6C-1C3609667CE6}\MPSigStub.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	6	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3844	4636	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:34:17 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-282ca4d2.exe. Fix information: RunAsInvoker, {1C2D58C3-DCD2-41E3-BD0B-25F05028C655}, 0x40102.	500	0		4	0	0	576460752303423488	5	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	4560	3212	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:34:16 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	4	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3456	3460	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 8:24:02 AM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	3	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3576	3580	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/16/2018 6:07:05 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x80010101.	505	0		4	0	0	576460752303423488	2	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	3672	3676	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/16/2018 5:43:10 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Compatibility fix applied to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe. Fix information: Cortana, {8F5A098F-FE98-46EB-B2F6-859078D5E2F7}, 0x10101.	500	0		4	0	0	576460752303423488	1	Microsoft-Windows-Application-Experience	eef54e71-0661-422d-9a98-82fd4940b820	Microsoft-Windows-Application-Experience/Program-Telemetry	4424	4428	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/16/2018 5:02:17 PM			microsoft-windows-application-experience/program-telemetry	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]