Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
Endpoint Protection client is up and running in a healthy state. Platform version: 4.12.17007.18011 Engine version: 1.1.19200.6 Signature version: 1.367.1544.0	1150	0		4	0	0	-9223372036854775808	113	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2516	3040	n-h2-845780-1.cbci-845780-1.local	S-1-5-18	6/14/2022 6:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\75c63a57755171eeec8e3567b74bf5de575a435d Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 6:49:46 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	112	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2516	1080	n-h2-845780-1.cbci-845780-1.local	S-1-5-18	6/14/2022 6:49:46 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\75c63a57755171eeec8e3567b74bf5de575a435d Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 6:49:46 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	111	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2516	1080	n-h2-845780-1.cbci-845780-1.local	S-1-5-18	6/14/2022 6:49:46 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint Protection client is up and running in a healthy state. Platform version: 4.12.17007.18011 Engine version: 1.1.19200.6 Signature version: 1.367.1544.0	1150	0		4	0	0	-9223372036854775808	110	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2516	4876	n-h2-845780-1.cbci-845780-1.local	S-1-5-18	6/14/2022 5:54:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\58fa123a63b3d188c31c7409b5003bc625c9d6aa Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 5:00:21 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	109	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2516	3064	n-h2-845780-1.cbci-845780-1.local	S-1-5-18	6/14/2022 5:00:27 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\58fa123a63b3d188c31c7409b5003bc625c9d6aa Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 5:00:21 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	108	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2516	3064	n-h2-845780-1.cbci-845780-1.local	S-1-5-18	6/14/2022 5:00:27 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\3937123a3634bcc628d9e73813aa963f672d0816 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 5:00:21 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	107	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2516	3064	n-h2-845780-1.cbci-845780-1.local	S-1-5-18	6/14/2022 5:00:27 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\3937123a3634bcc628d9e73813aa963f672d0816 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 5:00:21 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	106	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2516	3064	n-h2-845780-1.cbci-845780-1.local	S-1-5-18	6/14/2022 5:00:27 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\5d1b40e8975c3696f844f1d6a107c4cb25ae987e Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 5:00:21 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	105	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2516	3064	n-h2-845780-1.cbci-845780-1.local	S-1-5-18	6/14/2022 5:00:27 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\5d1b40e8975c3696f844f1d6a107c4cb25ae987e Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 5:00:21 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	104	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2516	3064	n-h2-845780-1.cbci-845780-1.local	S-1-5-18	6/14/2022 5:00:27 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\70b96d201df9a0a287e5ff21fbeb939a9e97ff6c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 5:00:21 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	103	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2516	3064	n-h2-845780-1.cbci-845780-1.local	S-1-5-18	6/14/2022 5:00:27 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\70b96d201df9a0a287e5ff21fbeb939a9e97ff6c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 5:00:21 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	102	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2516	3064	n-h2-845780-1.cbci-845780-1.local	S-1-5-18	6/14/2022 5:00:27 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\a763854d91b55497535119adbfc55fc2fce0bd51 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 5:00:21 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	101	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2516	3064	n-h2-845780-1.cbci-845780-1.local	S-1-5-18	6/14/2022 5:00:27 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\a763854d91b55497535119adbfc55fc2fce0bd51 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 5:00:21 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	100	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2516	3064	n-h2-845780-1.cbci-845780-1.local	S-1-5-18	6/14/2022 5:00:27 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpCampRing = 0x4	5007	0		4	0	0	-9223372036854775808	99	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2516	3036	n-h2-845780-1.cbci-845780-1.local	S-1-5-18	6/14/2022 4:54:48 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpEngineRing = 0x4	5007	0		4	0	0	-9223372036854775808	98	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2516	3036	n-h2-845780-1.cbci-845780-1.local	S-1-5-18	6/14/2022 4:54:48 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpCampRing = 0x4 New value:	5007	0		4	0	0	-9223372036854775808	97	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2516	3036	n-h2-845780-1.cbci-845780-1.local	S-1-5-18	6/14/2022 4:54:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpEngineRing = 0x4 New value:	5007	0		4	0	0	-9223372036854775808	96	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2516	3036	n-h2-845780-1.cbci-845780-1.local	S-1-5-18	6/14/2022 4:54:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Endpoint Protection client is up and running in a healthy state. Platform version: 4.12.17007.18011 Engine version: 1.1.19200.6 Signature version: 1.367.1544.0	1150	0		4	0	0	-9223372036854775808	95	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	3588	n-h2-845780-1	S-1-5-18	6/14/2022 4:53:21 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\739c1dc8495046bd58e86dbe374fec0916f76a4c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 4:02:02 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	94	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	3632	n-h2-845780-1	S-1-5-18	6/14/2022 4:02:02 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\739c1dc8495046bd58e86dbe374fec0916f76a4c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 4:02:02 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	93	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	3632	n-h2-845780-1	S-1-5-18	6/14/2022 4:02:02 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\2643da0f032ddd235604a3748305d9d9a2ea2f2f Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 4:02:01 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	92	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	3588	n-h2-845780-1	S-1-5-18	6/14/2022 4:02:01 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\2643da0f032ddd235604a3748305d9d9a2ea2f2f Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 4:02:01 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	91	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	3588	n-h2-845780-1	S-1-5-18	6/14/2022 4:02:01 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\a273b0bb8286e41fa9e3c23b81f135754188e857 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 4:02:00 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	90	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	3452	n-h2-845780-1	S-1-5-18	6/14/2022 4:02:00 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\a273b0bb8286e41fa9e3c23b81f135754188e857 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 4:02:00 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	89	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	3452	n-h2-845780-1	S-1-5-18	6/14/2022 4:02:00 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\06cc1c4954e2b2e6a02709280e81f485c7fd8ab0 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 4:02:00 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	88	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	3628	n-h2-845780-1	S-1-5-18	6/14/2022 4:02:00 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\06cc1c4954e2b2e6a02709280e81f485c7fd8ab0 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 4:02:00 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	87	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	3628	n-h2-845780-1	S-1-5-18	6/14/2022 4:02:00 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\86ad8d16b8cbe9dca1ac30b7aae5a379be49d886 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 4:01:59 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	86	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2868	n-h2-845780-1	S-1-5-18	6/14/2022 4:01:59 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\86ad8d16b8cbe9dca1ac30b7aae5a379be49d886 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 4:01:59 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	85	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2868	n-h2-845780-1	S-1-5-18	6/14/2022 4:01:59 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\e1e0b175666293ac378d810d823d4fabf9d6bf7b Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 4:01:58 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	84	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	3592	n-h2-845780-1	S-1-5-18	6/14/2022 4:01:58 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\e1e0b175666293ac378d810d823d4fabf9d6bf7b Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 4:01:58 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	83	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	3592	n-h2-845780-1	S-1-5-18	6/14/2022 4:01:58 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\37677c1975981a64201173393821a0706439228c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 4:01:58 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	82	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	3592	n-h2-845780-1	S-1-5-18	6/14/2022 4:01:58 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\37677c1975981a64201173393821a0706439228c Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 4:01:58 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	81	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	3592	n-h2-845780-1	S-1-5-18	6/14/2022 4:01:58 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\38466a2e39372d06e7282747fb118a3c798a8787 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 4:01:57 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	80	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	3628	n-h2-845780-1	S-1-5-18	6/14/2022 4:01:57 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\38466a2e39372d06e7282747fb118a3c798a8787 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 4:01:57 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	79	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	3628	n-h2-845780-1	S-1-5-18	6/14/2022 4:01:57 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\874263b7d1e49aefe90a2a9957dc3d68bc43d4ae Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 4:00:54 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	78	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 4:00:54 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\874263b7d1e49aefe90a2a9957dc3d68bc43d4ae Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 4:00:54 PM Persistence Limit Type: Duration Persistence Limit: 150196224	2010	0		4	0	0	-9223372036854775808	77	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 4:00:54 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\86d30896db27a1ec276547e1058a836a75fecd3e Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:57:41 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	76	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	3632	n-h2-845780-1	S-1-5-18	6/14/2022 3:57:42 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\86d30896db27a1ec276547e1058a836a75fecd3e Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:57:41 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	75	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	3632	n-h2-845780-1	S-1-5-18	6/14/2022 3:57:42 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\4592b7703d9cd327edce5a3e7fd9ceece60ed71a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:57:41 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	74	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	3632	n-h2-845780-1	S-1-5-18	6/14/2022 3:57:42 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\4592b7703d9cd327edce5a3e7fd9ceece60ed71a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:57:41 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	73	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	3632	n-h2-845780-1	S-1-5-18	6/14/2022 3:57:42 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\e6c3d026d80885c3a7be0b1c9d04641fc8c84d52 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:56:52 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	72	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	3632	n-h2-845780-1	S-1-5-18	6/14/2022 3:56:52 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\e6c3d026d80885c3a7be0b1c9d04641fc8c84d52 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:56:52 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	71	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	3632	n-h2-845780-1	S-1-5-18	6/14/2022 3:56:52 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\ecfd68a5cd74d47ed144ab1577b445305f4a67ad Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:35 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	70	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\ecfd68a5cd74d47ed144ab1577b445305f4a67ad Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:35 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	69	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\56400251282b20f427616c38c7b0424927fc6c11 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:35 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	68	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\56400251282b20f427616c38c7b0424927fc6c11 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:35 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	67	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\657d5e1911317d6bdbe8c382e9057dc649b2bccd Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:35 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	66	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\657d5e1911317d6bdbe8c382e9057dc649b2bccd Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:35 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	65	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\7bd496a7ef5285ed05e8634db7d5812b5bbb4b49 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:35 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	64	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\7bd496a7ef5285ed05e8634db7d5812b5bbb4b49 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:35 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	63	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\271401edb141dc10f1eade3533ec1bbcee86f588 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:34 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	62	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\271401edb141dc10f1eade3533ec1bbcee86f588 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:34 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	61	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\33cdec6132e75fc5bfaf7f0e76a0ffeb52766779 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:35 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	60	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\33cdec6132e75fc5bfaf7f0e76a0ffeb52766779 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:35 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	59	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\7999ee55244d404f3d06379eb451d6a1f9becc95 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:35 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	58	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\7999ee55244d404f3d06379eb451d6a1f9becc95 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:35 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	57	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\61cfe756bfa9d0f9c38cc516afdc15ca7231ce2b Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:35 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	56	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\61cfe756bfa9d0f9c38cc516afdc15ca7231ce2b Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:35 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	55	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\23ee135b566d067712f9afa7ed0188850d45c074 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:34 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	54	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\23ee135b566d067712f9afa7ed0188850d45c074 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:34 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	53	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b87c8f7a748a2d9192cd7ccc804ce154b259ca65 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:34 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	52	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\b87c8f7a748a2d9192cd7ccc804ce154b259ca65 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:34 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	51	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\4cc5558e07e1c58181da41e64e991e224743252a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:34 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	50	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\4cc5558e07e1c58181da41e64e991e224743252a Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:34 PM Persistence Limit Type: Duration Persistence Limit: 50065408	2010	0		4	0	0	-9223372036854775808	49	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiSpyware User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\560a8c2b76ffc5795e9c3665c741775f8d2ae8b4 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:35 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	48	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender used Dynamic Signature Service to retrieve additional signatures to help protect your machine. Current Signature Version: 1.367.1544.0 Signature Type: AntiVirus User: \ Current Engine Version: 1.1.19200.6 Dynamic Signature Type: Signature update Persistence Path: C:\ProgramData\Microsoft\Windows Defender\Scans\RtSigs\data\560a8c2b76ffc5795e9c3665c741775f8d2ae8b4 Dynamic Signature Version: 0.0.0.0 Dynamic Signature Compilation Timestamp: ?6/?14/?2022 3:54:35 PM Persistence Limit Type: Duration Persistence Limit: 288000000	2010	0		4	0	0	-9223372036854775808	47	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:54:35 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpCampRing = 0x4	5007	0		4	0	0	-9223372036854775808	46	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2848	n-h2-845780-1	S-1-5-18	6/14/2022 3:53:25 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpEngineRing = 0x4	5007	0		4	0	0	-9223372036854775808	45	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2848	n-h2-845780-1	S-1-5-18	6/14/2022 3:53:25 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpCampRing = 0x4 New value:	5007	0		4	0	0	-9223372036854775808	44	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:53:22 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpEngineRing = 0x4 New value:	5007	0		4	0	0	-9223372036854775808	43	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2464	2844	n-h2-845780-1	S-1-5-18	6/14/2022 3:53:22 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.367.1544.0 Previous Signature Version: 1.261.25.0 Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.19200.6 Previous Engine Version: 1.1.14500.5	2000	0		4	0	0	-9223372036854775808	42	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2204	2772	n-h2-845780-1	S-1-5-18	6/14/2022 3:52:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.367.1544.0 Previous Signature Version: 1.261.25.0 Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.19200.6 Previous Engine Version: 1.1.14500.5	2000	0		4	0	0	-9223372036854775808	41	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2204	2772	n-h2-845780-1	S-1-5-18	6/14/2022 3:52:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.19200.6 Previous Engine Version: 1.1.14500.5 User: NT AUTHORITY\NETWORK SERVICE	2002	0		4	0	0	-9223372036854775808	40	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2204	2772	n-h2-845780-1	S-1-5-18	6/14/2022 3:52:43 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpGradualEngineRelease = 0x1 New value:	5007	0		4	0	0	-9223372036854775808	39	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2204	2452	WIN-5T344G8GM1H	S-1-5-18	6/14/2022 3:52:33 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpCampRing = 0x4	5007	0		4	0	0	-9223372036854775808	38	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2204	2452	WIN-5T344G8GM1H	S-1-5-18	6/14/2022 3:52:33 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpEngineRing = 0x4	5007	0		4	0	0	-9223372036854775808	37	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2204	2452	WIN-5T344G8GM1H	S-1-5-18	6/14/2022 3:52:33 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has been stopped before completion. Scan ID: {2876E356-24ED-4235-BF28-69439A17AF7D} Scan Type: Antimalware Scan Parameters: Quick Scan User: NT AUTHORITY\SYSTEM	1002	0		3	0	0	-9223372036854775808	36	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	3896	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:22:48 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has started. Scan ID: {2876E356-24ED-4235-BF28-69439A17AF7D} Scan Type: Antimalware Scan Parameters: Quick Scan Scan Resources: User: NT AUTHORITY\SYSTEM	1000	0		4	0	0	-9223372036854775808	35	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	3896	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:14:50 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.261.25.0 Update Source: Microsoft Malware Protection Center Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.14500.5 Error code: 0x800704e8 Error description: The remote system is not available. For information about network troubleshooting, see Windows Help.	2001	0		2	0	0	-9223372036854775808	34	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	2428	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:04:58 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.261.25.0 Update Source: Microsoft Malware Protection Center Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.14500.5 Error code: 0x800704e8 Error description: The remote system is not available. For information about network troubleshooting, see Windows Help.	2001	0		2	0	0	-9223372036854775808	33	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	2428	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:04:58 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.25.0 Previous Signature Version: 1.261.22.0 Signature Type: AntiSpyware Update Type: Delta User: NT AUTHORITY\SYSTEM Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14500.5	2000	0		4	0	0	-9223372036854775808	32	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	2592	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:54:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.25.0 Previous Signature Version: 1.261.22.0 Signature Type: AntiVirus Update Type: Delta User: NT AUTHORITY\SYSTEM Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14500.5	2000	0		4	0	0	-9223372036854775808	31	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2188	2592	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:54:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\Scan\AggressiveCatchupQuickScanReattemptElapsed = 0x17 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\AggressiveCatchupQuickScanReattemptElapsed = 0x17	5007	0		4	0	0	-9223372036854775808	30	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2888	3724	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:38 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\Scan\DaysUntilAggressiveCatchupQuickScan = 0x19 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\DaysUntilAggressiveCatchupQuickScan = 0x1E	5007	0		4	0	0	-9223372036854775808	29	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2888	3724	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:38 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\NewLocation = C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0 New value: Default\NewLocation =	5007	0		4	0	0	-9223372036854775808	28	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2888	3012	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:34 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\Program Files\Windows Defender\ New value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\	5007	0		4	0	0	-9223372036854775808	27	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2888	3012	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:34 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has been stopped before completion. Scan ID: {E7A34311-C021-4F04-8BB3-B3BC9293E402} Scan Type: Antimalware Scan Parameters: Quick Scan User: NT AUTHORITY\SYSTEM	1002	0		3	0	0	-9223372036854775808	26	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	3872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:45:57 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 118.2.0.0 Update Source: Microsoft Malware Protection Center Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 2.1.14202.0 Error code: 0x80072ee2 Error description: The operation timed out	2001	0		2	0	0	-9223372036854775808	25	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:54 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.22.0 Previous Signature Version: 1.259.1667.0 Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.2	2000	0		4	0	0	-9223372036854775808	24	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	2880	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:21 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.261.22.0 Previous Signature Version: 1.259.1667.0 Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.2	2000	0		4	0	0	-9223372036854775808	23	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	2880	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:21 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.14500.5 Previous Engine Version: 1.1.14405.2 User: NT AUTHORITY\NETWORK SERVICE	2002	0		4	0	0	-9223372036854775808	22	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	2880	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:21 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: New value: HKLM\SOFTWARE\Microsoft\Windows Defender\MpEngine\MpGradualEngineRelease = 0x1	5007	0		4	0	0	-9223372036854775808	21	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	2244	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:35:21 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.	2001	0		2	0	0	-9223372036854775808	20	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:34:10 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.	2001	0		2	0	0	-9223372036854775808	19	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:34:10 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.259.1667.0 Update Source: Microsoft Update Server Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.14405.2 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.	2001	0		2	0	0	-9223372036854775808	18	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:34:10 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender scan has started. Scan ID: {E7A34311-C021-4F04-8BB3-B3BC9293E402} Scan Type: Antimalware Scan Parameters: Quick Scan Scan Resources: User: NT AUTHORITY\SYSTEM	1000	0		4	0	0	-9223372036854775808	17	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	1716	3872	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:33:58 AM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.14202.0 Previous Engine Version: 2.1.12706.0 User: WIN-5T344G8GM1H\Administrator	2002	0		4	0	0	-9223372036854775808	16	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	2364	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:48 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 118.2.0.0 Previous Signature Version: 116.1.0.0 Signature Type: Network Inspection System Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 2.1.14202.0 Previous Engine Version: 2.1.12706.0	2000	0		4	0	0	-9223372036854775808	15	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	2364	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:48 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://spynet2.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx SOAP:https://spynetalt.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx REST:https://spynet2.microsoft.com/spyNet.svc/submitReport REST:https://spynetalt.microsoft.com/spyNet.svc/submitReport BOND:https://spynet2.microsoft.com/spyNet.svc/bond/submitreport BOND:https://spynetalt.microsoft.com/spyNet.svc/bond/submitreport New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://wdcp.microsoft.com/WdCpSrvc.asmx SOAP:https://wdcpalt.microsoft.com/WdCpSrvc.asmx REST:https://wdcp.microsoft.com/wdcp.svc/submitReport REST:https://wdcpalt.microsoft.com/wdcp.svc/submitReport BOND:https://wdcp.microsoft.com/wdcp.svc/bond/submitreport BOND:https://wdcpalt.microsoft.com/wdcp.svc/bond/submitreport	5007	0		4	0	0	-9223372036854775808	14	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5872	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x1 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x3	5007	0		4	0	0	-9223372036854775808	13	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5872	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.259.1667.0 Previous Signature Version: 1.221.14.0 Signature Type: AntiSpyware Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.0	2000	0		4	0	0	-9223372036854775808	12	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5004	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 1.259.1667.0 Previous Signature Version: 1.221.14.0 Signature Type: AntiVirus Update Type: Full User: WIN-5T344G8GM1H\Administrator Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.0	2000	0		4	0	0	-9223372036854775808	11	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5004	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 1.1.14405.2 Previous Engine Version: 1.1.12805.0 User: WIN-5T344G8GM1H\Administrator	2002	0		4	0	0	-9223372036854775808	10	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	5004	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:45 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\ManagedDefenderProductType = 0x0 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\ManagedDefenderProductType = 0x0	5007	0		4	0	0	-9223372036854775808	9	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	2136	568	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:35:36 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\InstallLocation = C:\Program Files\Windows Defender New value: HKLM\SOFTWARE\Microsoft\Windows Defender\InstallLocation = C:\Program Files\Windows Defender\	5007	0		4	0	0	-9223372036854775808	8	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	2772	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:26 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender engine version has been updated. Current Engine Version: 2.1.12706.0 Previous Engine Version: User: NT AUTHORITY\SYSTEM	2002	0		4	0	0	-9223372036854775808	7	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	2044	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:26 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender signature version has been updated. Current Signature Version: 116.1.0.0 Previous Signature Version: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: 2.1.12706.0 Previous Engine Version:	2000	0		4	0	0	-9223372036854775808	6	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	2044	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:26 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\SpyNetReportingLocation = REST:https://spynet2.microsoft.com/spyNet.svc/submitReport New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SpyNetReportingLocation = SOAP:https://spynet2.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx SOAP:https://spynetalt.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx REST:https://spynet2.microsoft.com/spyNet.svc/submitReport REST:https://spynetalt.microsoft.com/spyNet.svc/submitReport BOND:https://spynet2.microsoft.com/spyNet.svc/bond/submitreport BOND:https://spynetalt.microsoft.com/spyNet.svc/bond/submitreport	5007	0		4	0	0	-9223372036854775808	5	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:23 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\MAPSconcurrencyDss = 0xA New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\MAPSconcurrencyDss = 0xA	5007	0		4	0	0	-9223372036854775808	4	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:23 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\SSLOptions = 0x0 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\SSLOptions = 0x1	5007	0		4	0	0	-9223372036854775808	3	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:23 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: Default\SpyNet\MAPSconcurrency = 0x1 New value: HKLM\SOFTWARE\Microsoft\Windows Defender\SpyNet\MAPSconcurrency = 0x1	5007	0		4	0	0	-9223372036854775808	2	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:23 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Defender Configuration has changed. If this is an unexpected event you should review the settings as this may be the result of malware. Old value: N/A\ProductType = New value: HKLM\SOFTWARE\Microsoft\Windows Defender\ProductType = 0x2	5007	0		4	0	0	-9223372036854775808	1	Microsoft-Windows-Windows Defender	11cd958a-c507-4ef3-b3f2-5fd9dfbd2c78	Microsoft-Windows-Windows Defender/Operational	124	1992	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:16 PM			microsoft-windows-windows defender/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]