Message	Id	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	275	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	2020	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:14:28 PM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	274	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	4604	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:14:14 PM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully	132	4	10	2	4611686018427387906	273	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	4600	4516	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:14:12 PM	f9a29aee-bcd3-0000-02b4-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Activity Transfer	254	4	0	0	4611686018427387942	272	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	4600	4516	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:14:12 PM	f9a29aee-bcd3-0000-02b4-a2f9d3bcd601	f9a29aee-bcd3-0002-40b0-a2f9d3bcd601	microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Listener	145	4	5	1	4611686018427387906	271	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	4600	4200	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:14:12 PM	f9a29aee-bcd3-0002-40b0-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully	132	4	10	2	4611686018427387906	270	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	4600	1660	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:14:12 PM	f9a29aee-bcd3-0000-02b4-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Listener	145	4	5	1	4611686018427387906	269	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	4600	4200	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:14:12 PM	f9a29aee-bcd3-0000-02b4-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	268	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	2084	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:14:08 PM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.	45	4	15	2	4611686018427387906	267	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	3132	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:37 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	WinRM MI Session	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.	48	4	16	2	4611686018427387906	266	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	3132	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:37 PM	f9a29aee-bcd3-0003-6ab1-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	WinRM MI Operation	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully	132	4	10	2	4611686018427387906	265	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	3132	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:37 PM	f9a29aee-bcd3-0003-6ab1-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.	47	4	16	1	4611686018427387906	264	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	4764	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:37 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Operation	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..	44	4	15	1	4611686018427387906	263	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	2128	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:37 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Session	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.	45	4	15	2	4611686018427387906	262	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	3132	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:34 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	WinRM MI Session	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.	45	4	15	2	4611686018427387906	261	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	3132	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:34 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	WinRM MI Session	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.	48	4	16	2	4611686018427387906	260	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	3132	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:34 PM	f9a29aee-bcd3-0003-5ab1-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	WinRM MI Operation	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully	132	4	10	2	4611686018427387906	259	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	3132	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:34 PM	f9a29aee-bcd3-0003-5ab1-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Host under the root/wmi namespace.	47	4	16	1	4611686018427387906	258	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	3688	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:34 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Operation	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..	44	4	15	1	4611686018427387906	257	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	2128	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:34 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Session	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.	48	4	16	2	4611686018427387906	256	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	3132	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:34 PM	f9a29aee-bcd3-0004-38e5-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	WinRM MI Operation	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully	132	4	10	2	4611686018427387906	255	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	3132	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:34 PM	f9a29aee-bcd3-0004-38e5-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_IDMethod under the root/wmi namespace.	47	4	16	1	4611686018427387906	254	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	4240	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:34 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Operation	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..	44	4	15	1	4611686018427387906	253	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	2128	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:34 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Session	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.	45	4	15	2	4611686018427387906	252	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	4640	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:06 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	WinRM MI Session	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.	48	4	16	2	4611686018427387906	251	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	4640	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:05 PM	f9a29aee-bcd3-0000-2eb3-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	WinRM MI Operation	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully	132	4	10	2	4611686018427387906	250	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	4640	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:05 PM	f9a29aee-bcd3-0000-2eb3-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.	47	4	16	1	4611686018427387906	249	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	108	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:05 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Operation	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..	44	4	15	1	4611686018427387906	248	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	2128	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:05 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Session	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.	45	4	15	2	4611686018427387906	247	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	4640	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:02 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	WinRM MI Session	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.	45	4	15	2	4611686018427387906	246	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	3132	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:02 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	WinRM MI Session	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.	48	4	16	2	4611686018427387906	245	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	3132	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:02 PM	f9a29aee-bcd3-0003-35af-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	WinRM MI Operation	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully	132	4	10	2	4611686018427387906	244	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	3132	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:02 PM	f9a29aee-bcd3-0003-35af-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Host under the root/wmi namespace.	47	4	16	1	4611686018427387906	243	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	3128	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:02 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Operation	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..	44	4	15	1	4611686018427387906	242	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	2128	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:02 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Session	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.	48	4	16	2	4611686018427387906	241	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	4640	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:02 PM	f9a29aee-bcd3-0000-ffb2-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	WinRM MI Operation	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully	132	4	10	2	4611686018427387906	240	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	4640	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:02 PM	f9a29aee-bcd3-0000-ffb2-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_IDMethod under the root/wmi namespace.	47	4	16	1	4611686018427387906	239	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	3980	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:02 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Operation	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..	44	4	15	1	4611686018427387906	238	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	2128	hv-osbrick-7503	S-1-5-18	11/17/2020 12:13:02 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Session	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.	45	4	15	2	4611686018427387906	237	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	4640	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:35 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	WinRM MI Session	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.	48	4	16	2	4611686018427387906	236	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	4640	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:35 PM	f9a29aee-bcd3-0000-e8b2-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	WinRM MI Operation	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully	132	4	10	2	4611686018427387906	235	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	4640	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:35 PM	f9a29aee-bcd3-0000-e8b2-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.	47	4	16	1	4611686018427387906	234	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	4436	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:35 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Operation	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..	44	4	15	1	4611686018427387906	233	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	2128	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:35 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Session	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.	45	4	15	2	4611686018427387906	232	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	972	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:34 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	WinRM MI Session	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.	48	4	16	2	4611686018427387906	231	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	972	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:34 PM	f9a29aee-bcd3-0004-25e3-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	WinRM MI Operation	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully	132	4	10	2	4611686018427387906	230	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	972	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:34 PM	f9a29aee-bcd3-0004-25e3-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Snapshot under the root/wmi namespace.	47	4	16	1	4611686018427387906	229	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	4880	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:34 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Operation	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..	44	4	15	1	4611686018427387906	228	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	2128	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:34 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Session	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.	45	4	15	2	4611686018427387906	227	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	3132	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:31 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	WinRM MI Session	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.	45	4	15	2	4611686018427387906	226	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	4640	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:31 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	WinRM MI Session	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.	48	4	16	2	4611686018427387906	225	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	4640	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:31 PM	f9a29aee-bcd3-0001-51ae-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	WinRM MI Operation	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully	132	4	10	2	4611686018427387906	224	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	4640	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:31 PM	f9a29aee-bcd3-0001-51ae-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Host under the root/wmi namespace.	47	4	16	1	4611686018427387906	223	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	1572	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:31 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Operation	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..	44	4	15	1	4611686018427387906	222	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	2128	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:31 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Session	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.	48	4	16	2	4611686018427387906	221	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	4640	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:31 PM	f9a29aee-bcd3-0000-bfb2-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	WinRM MI Operation	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully	132	4	10	2	4611686018427387906	220	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	4640	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:31 PM	f9a29aee-bcd3-0000-bfb2-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_IDMethod under the root/wmi namespace.	47	4	16	1	4611686018427387906	219	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	1052	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:31 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Operation	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..	44	4	15	1	4611686018427387906	218	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	2128	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:31 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Session	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler closed the session.	45	4	15	2	4611686018427387906	217	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	4640	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:26 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	WinRM MI Session	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session successfully completed the operation.	48	4	16	2	4611686018427387906	216	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	4640	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:26 PM	f9a29aee-bcd3-0003-01af-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	WinRM MI Operation	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Delete completed successfully	132	4	10	2	4611686018427387906	215	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	4640	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:26 PM	f9a29aee-bcd3-0003-01af-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol session began an operation of type DeleteInstance to the server. The operation accesses class WT_Disk under the root/wmi namespace.	47	4	16	1	4611686018427387906	214	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	1572	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:26 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Operation	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler started to create a session at the following destination: ..	44	4	15	1	4611686018427387906	213	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	2128	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:26 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Session	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM protocol handler has began loading for application <none>.	41	4	14	1	4611686018427387906	212	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1244	2128	hv-osbrick-7503	S-1-5-18	11/17/2020 12:12:26 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WinRM MI Protocol Handler	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	211	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	4604	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:10:05 PM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	210	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	596	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:10:02 PM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	209	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1352	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:09:59 PM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	208	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	4532	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:09:57 PM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	207	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	596	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:09:54 PM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	206	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	4040	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:09:51 PM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	205	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	596	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:09:48 PM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	204	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	4532	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:09:45 PM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully	132	4	10	2	4611686018427387906	203	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	4528	3880	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:09:42 PM	f9a29aee-bcd3-0000-25af-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Activity Transfer	254	4	0	0	4611686018427387942	202	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	4528	3880	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:09:42 PM	f9a29aee-bcd3-0000-25af-a2f9d3bcd601	f9a29aee-bcd3-0002-25ae-a2f9d3bcd601	microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Listener	145	4	5	1	4611686018427387906	201	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	4528	4036	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:09:42 PM	f9a29aee-bcd3-0002-25ae-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully	132	4	10	2	4611686018427387906	200	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	4528	3880	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:09:42 PM	f9a29aee-bcd3-0000-25af-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Listener	145	4	5	1	4611686018427387906	199	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	4528	4036	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:09:42 PM	f9a29aee-bcd3-0000-25af-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	198	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	4604	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:09:38 PM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	197	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	2084	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:08:49 PM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully	132	4	10	2	4611686018427387906	196	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	3304	4444	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:08:42 PM	f9a29aee-bcd3-0001-caac-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Activity Transfer	254	4	0	0	4611686018427387942	195	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	3304	4444	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:08:42 PM	f9a29aee-bcd3-0001-caac-a2f9d3bcd601	f9a29aee-bcd3-0003-0aad-a2f9d3bcd601	microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Listener	145	4	5	1	4611686018427387906	194	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	3304	4124	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:08:42 PM	f9a29aee-bcd3-0003-0aad-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully	132	4	10	2	4611686018427387906	193	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	3304	4732	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:08:42 PM	f9a29aee-bcd3-0001-caac-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Listener	145	4	5	1	4611686018427387906	192	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	3304	4124	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:08:42 PM	f9a29aee-bcd3-0001-caac-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	191	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1332	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 12:08:38 PM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	190	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1352	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:56:19 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	189	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	596	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:56:14 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	188	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	596	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:55:35 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	187	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	596	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:55:32 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	186	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1752	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:55:29 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	185	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1332	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:55:24 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	184	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1332	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:55:00 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	183	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	4040	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:54:56 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	182	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1752	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:54:53 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	181	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	4040	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:54:48 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	180	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	4040	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:54:32 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	179	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	4040	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:54:28 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	178	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	4040	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:54:25 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	177	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	596	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:54:19 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	176	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	596	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:54:03 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	175	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1352	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:53:59 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	174	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	4040	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:53:56 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	173	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	2512	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:53:51 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	172	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	596	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:52:39 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	171	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1752	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:52:35 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	170	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	596	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:52:32 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	169	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	2084	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:52:27 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	168	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1332	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:50:46 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	167	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	2512	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:50:42 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	166	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	2512	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:50:39 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	165	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1752	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:50:34 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	164	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	2084	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:47:34 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	163	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1752	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:47:30 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	162	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1752	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:47:27 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	161	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1332	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:47:22 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	160	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1332	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:46:51 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	159	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1752	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:46:47 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	158	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1752	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:46:26 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	157	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	4588	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:46:17 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	156	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	2512	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:46:13 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	155	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1760	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:46:09 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	154	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1752	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:46:06 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	153	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	4040	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:46:02 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	152	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	596	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:46:00 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	151	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1352	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:45:58 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	150	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	596	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:45:55 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	149	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1352	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:45:50 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	148	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1332	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:45:46 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	147	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	2512	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:45:43 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	146	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1352	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:45:40 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	145	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	596	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:45:32 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	144	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1808	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:45:29 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	143	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	596	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:45:26 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	142	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	596	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:45:21 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	141	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	4040	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:45:07 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	140	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	596	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:45:02 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	139	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	4040	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:31:00 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	138	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1820	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:30:55 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	137	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1756	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:30:53 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	136	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	4040	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:29:08 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	135	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1760	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:29:06 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	134	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1760	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:29:04 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	133	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	4040	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:29:02 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	132	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1752	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:28:59 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	131	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	4040	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:28:57 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	130	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1756	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:28:55 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	129	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1820	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:28:54 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	128	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1820	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:28:47 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	127	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1820	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:28:45 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	126	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	4040	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:28:43 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	125	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1752	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:28:39 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	124	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1760	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:28:38 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	123	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	4040	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:27:58 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	122	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1756	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:27:53 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	121	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1752	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:27:52 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	120	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	4040	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:27:47 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	119	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1756	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:27:29 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	118	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	3164	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:27:24 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	117	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1820	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:27:21 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	116	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1752	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:27:20 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	115	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1808	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:25:52 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	114	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1752	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:25:49 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	113	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	3164	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:25:46 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	112	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1760	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:25:44 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	111	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1752	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:25:42 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	110	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1808	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:25:40 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	109	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	3164	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:25:38 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	108	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1744	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:25:33 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	107	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1356	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:25:21 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	106	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1744	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:25:17 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	105	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1744	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:25:16 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	104	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1352	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:25:14 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	103	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1752	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:25:05 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	102	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1756	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:24:56 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	101	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1744	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:24:52 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	100	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1760	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:24:38 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	99	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1760	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:24:34 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	98	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1760	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:24:32 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully	132	4	10	2	4611686018427387906	97	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1172	1384	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:24:29 AM	f9a29aee-bcd3-0004-a69d-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Activity Transfer	254	4	0	0	4611686018427387942	96	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1172	1384	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:24:29 AM	f9a29aee-bcd3-0004-a69d-a2f9d3bcd601	f9a29aee-bcd3-0005-8a9b-a2f9d3bcd601	microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Listener	145	4	5	1	4611686018427387906	95	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1172	3240	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:24:29 AM	f9a29aee-bcd3-0005-8a9b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully	132	4	10	2	4611686018427387906	94	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1172	1384	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:24:29 AM	f9a29aee-bcd3-0004-a69d-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Listener	145	4	5	1	4611686018427387906	93	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1172	3240	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:24:29 AM	f9a29aee-bcd3-0004-a69d-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	92	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1820	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:24:15 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Creating WSMan shell on server with ResourceUri: %1	91	4	9	0	4611686018427387908	91	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	1760	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1001	11/17/2020 11:24:03 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Request handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Create completed successfully	132	4	10	2	4611686018427387906	90	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1156	612	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1000	11/17/2020 11:24:01 AM	f9a29aee-bcd3-0003-519b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Create started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Service/certmapping	145	4	5	1	4611686018427387906	89	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1156	4012	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1000	11/17/2020 11:24:01 AM	f9a29aee-bcd3-0003-519b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Get failed, error code 2150858752	142	2	10	2	4611686018427387906	88	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1156	612	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1000	11/17/2020 11:24:01 AM	f9a29aee-bcd3-0003-519b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Get started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Service/certmapping	145	4	5	1	4611686018427387906	87	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1156	4012	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1000	11/17/2020 11:24:01 AM	f9a29aee-bcd3-0003-519b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Put completed successfully	132	4	10	2	4611686018427387906	86	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1156	612	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1000	11/17/2020 11:24:01 AM	f9a29aee-bcd3-0003-519b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Put started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Service/Auth	145	4	5	1	4611686018427387906	85	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1156	4012	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1000	11/17/2020 11:24:01 AM	f9a29aee-bcd3-0003-519b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Get completed successfully	132	4	10	2	4611686018427387906	84	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1156	612	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1000	11/17/2020 11:24:01 AM	f9a29aee-bcd3-0003-519b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Get started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Service/Auth	145	4	5	1	4611686018427387906	83	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1156	4012	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1000	11/17/2020 11:24:01 AM	f9a29aee-bcd3-0003-519b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Get completed successfully	132	4	10	2	4611686018427387906	82	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1156	612	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1000	11/17/2020 11:24:00 AM	f9a29aee-bcd3-0003-519b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Get started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Listener	145	4	5	1	4611686018427387906	81	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1156	4012	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1000	11/17/2020 11:24:00 AM	f9a29aee-bcd3-0003-519b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Create completed successfully	132	4	10	2	4611686018427387906	80	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1156	604	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1000	11/17/2020 11:24:00 AM	f9a29aee-bcd3-0003-519b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Create started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Listener	145	4	5	1	4611686018427387906	79	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1156	4012	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1000	11/17/2020 11:24:00 AM	f9a29aee-bcd3-0003-519b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Get failed, error code 2150858752	142	2	10	2	4611686018427387906	78	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1156	612	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1000	11/17/2020 11:24:00 AM	f9a29aee-bcd3-0003-519b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Get started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Listener	145	4	5	1	4611686018427387906	77	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1156	4012	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1000	11/17/2020 11:24:00 AM	f9a29aee-bcd3-0003-519b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Put completed successfully	132	4	10	2	4611686018427387906	76	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1156	604	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1000	11/17/2020 11:24:00 AM	f9a29aee-bcd3-0003-519b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Put started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Service/Auth	145	4	5	1	4611686018427387906	75	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1156	4012	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1000	11/17/2020 11:24:00 AM	f9a29aee-bcd3-0003-519b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Get completed successfully	132	4	10	2	4611686018427387906	74	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1156	604	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1000	11/17/2020 11:24:00 AM	f9a29aee-bcd3-0003-519b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Get started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/Config/Service/Auth	145	4	5	1	4611686018427387906	73	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1156	4012	hv-osbrick-7503	S-1-5-21-3624791923-3616389358-3264692570-1000	11/17/2020 11:24:00 AM	f9a29aee-bcd3-0003-519b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully	209	4	11	0	4611686018427387908	72	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	2380	hv-osbrick-7503	S-1-5-20	11/17/2020 11:23:09 AM	f9a29aee-bcd3-0005-289b-a2f9d3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting	208	4	11	1	4611686018427387908	71	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1320	2380	hv-osbrick-7503	S-1-5-20	11/17/2020 11:23:09 AM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully	212	4	11	2	4611686018427387908	70	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1616	1740	hv-osbrick-7503	S-1-5-20	11/17/2020 11:22:38 AM	bcffeacc-bcd3-0003-ddea-ffbcd3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping	211	4	11	0	4611686018427387908	69	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1616	1740	WIN-5T344G8GM1H	S-1-5-20	11/17/2020 11:22:37 AM	bcffeacc-bcd3-0003-ddea-ffbcd3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully	209	4	11	0	4611686018427387908	68	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1616	2112	WIN-5T344G8GM1H	S-1-5-20	11/17/2020 11:21:39 AM	bcffeacc-bcd3-0003-ddea-ffbcd3bcd601		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting	208	4	11	1	4611686018427387908	67	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1616	2112	WIN-5T344G8GM1H	S-1-5-20	11/17/2020 11:21:39 AM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully	212	4	11	2	4611686018427387908	66	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1392	1500	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:48:13 AM	ad8d0f9c-9109-0001-d70f-8dad0991d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping	211	4	11	0	4611686018427387908	65	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1392	1500	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:48:13 AM	ad8d0f9c-9109-0001-d70f-8dad0991d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Invoke completed successfully	132	4	10	2	4611686018427387906	64	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	4104	3660	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 9:42:51 AM	ad8d0f9c-9109-0003-3f12-8dad0991d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Invoke started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/config/service	145	4	5	1	4611686018427387906	63	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	4104	3176	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/19/2018 9:42:51 AM	ad8d0f9c-9109-0003-3f12-8dad0991d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully	209	4	11	0	4611686018427387908	62	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1392	2176	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:41:30 AM	ad8d0f9c-9109-0001-d70f-8dad0991d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting	208	4	11	1	4611686018427387908	61	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1392	2176	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:41:30 AM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully	212	4	11	2	4611686018427387908	60	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1524	3416	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:41:15 AM	aff0bd57-9107-0000-a1bd-f0af0791d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping	211	4	11	0	4611686018427387908	59	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1524	3416	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:41:15 AM	aff0bd57-9107-0000-a1bd-f0af0791d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully	209	4	11	0	4611686018427387908	58	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1524	2212	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:27:16 AM	aff0bd57-9107-0000-a1bd-f0af0791d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting	208	4	11	1	4611686018427387908	57	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1524	2212	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:27:16 AM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully	212	4	11	2	4611686018427387908	56	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1404	2004	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:27:00 AM	96ed06e7-9107-0002-2807-ed960791d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping	211	4	11	0	4611686018427387908	55	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1404	2004	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:27:00 AM	96ed06e7-9107-0002-2807-ed960791d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully	209	4	11	0	4611686018427387908	54	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1404	2284	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:26:41 AM	96ed06e7-9107-0002-2807-ed960791d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting	208	4	11	1	4611686018427387908	53	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1404	2284	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:26:41 AM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully	212	4	11	2	4611686018427387908	52	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1464	1192	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:26:23 AM	17f2f0cc-9107-0000-03f1-f2170791d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping	211	4	11	0	4611686018427387908	51	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1464	1192	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:26:23 AM	17f2f0cc-9107-0000-03f1-f2170791d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully	209	4	11	0	4611686018427387908	50	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1464	2152	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:23:01 AM	17f2f0cc-9107-0000-03f1-f2170791d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting	208	4	11	1	4611686018427387908	49	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1464	2152	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:23:01 AM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully	212	4	11	2	4611686018427387908	48	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1460	3948	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:22:50 AM	289cfce6-9103-0003-08fd-9c280391d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping	211	4	11	0	4611686018427387908	47	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1460	3948	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 9:22:50 AM	289cfce6-9103-0003-08fd-9c280391d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully	209	4	11	0	4611686018427387908	46	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1460	2148	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:54:49 AM	289cfce6-9103-0003-08fd-9c280391d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting	208	4	11	1	4611686018427387908	45	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1460	2148	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:54:49 AM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully	212	4	11	2	4611686018427387908	44	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1524	1916	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:54:40 AM	7c5c4ffb-9102-0002-1f50-5c7c0291d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping	211	4	11	0	4611686018427387908	43	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1524	1916	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:54:40 AM	7c5c4ffb-9102-0002-1f50-5c7c0291d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully	132	4	10	2	4611686018427387906	42	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1192	2028	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:27 AM	7c5c4ffb-9102-0000-4a51-5c7c0291d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/windows/shell	145	4	5	1	4611686018427387906	41	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1192	3004	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:27 AM	7c5c4ffb-9102-0000-4a51-5c7c0291d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully	132	4	10	2	4611686018427387906	40	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1192	2632	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:27 AM	7c5c4ffb-9102-0000-4a51-5c7c0291d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/config/listener	145	4	5	1	4611686018427387906	39	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1192	3004	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:52:27 AM	7c5c4ffb-9102-0000-4a51-5c7c0291d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully	209	4	11	0	4611686018427387908	38	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1524	2156	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:50:03 AM	7c5c4ffb-9102-0002-1f50-5c7c0291d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting	208	4	11	1	4611686018427387908	37	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1524	2156	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:50:03 AM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully	212	4	11	2	4611686018427387908	36	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1332	2544	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:49:46 AM	9a81cb05-910f-0003-3ccb-819a0f91d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping	211	4	11	0	4611686018427387908	35	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1332	2544	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:49:46 AM	9a81cb05-910f-0003-3ccb-819a0f91d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully	132	4	10	2	4611686018427387906	34	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	964	5108	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:26:55 AM	9a81cb05-910f-0003-8acc-819a0f91d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/windows/shell	145	4	5	1	4611686018427387906	33	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	964	4228	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:26:55 AM	9a81cb05-910f-0003-8acc-819a0f91d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully	132	4	10	2	4611686018427387906	32	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	964	2904	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:26:55 AM	9a81cb05-910f-0003-8acc-819a0f91d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/config/listener	145	4	5	1	4611686018427387906	31	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	964	4228	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 8:26:55 AM	9a81cb05-910f-0003-8acc-819a0f91d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully	209	4	11	0	4611686018427387908	30	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1332	1772	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:23:56 AM	9a81cb05-910f-0003-3ccb-819a0f91d301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting	208	4	11	1	4611686018427387908	29	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1332	1772	WIN-5T344G8GM1H	S-1-5-20	1/19/2018 8:23:56 AM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully	212	4	11	2	4611686018427387908	28	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1420	1824	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 6:44:39 PM	b65c0852-8ef4-0001-7408-5cb6f48ed301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping	211	4	11	0	4611686018427387908	27	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1420	1824	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 6:44:39 PM	b65c0852-8ef4-0001-7408-5cb6f48ed301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully	209	4	11	0	4611686018427387908	26	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1420	1464	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 6:06:25 PM	b65c0852-8ef4-0001-7408-5cb6f48ed301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting	208	4	11	1	4611686018427387908	25	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1420	1464	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 6:06:24 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully	212	4	11	2	4611686018427387908	24	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1400	1792	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 6:06:09 PM	53b2b737-8ef1-0002-53b7-b253f18ed301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping	211	4	11	0	4611686018427387908	23	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1400	1792	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 6:06:09 PM	53b2b737-8ef1-0002-53b7-b253f18ed301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully	132	4	10	2	4611686018427387906	22	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1152	2472	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:44:23 PM	53b2b737-8ef1-0000-6db9-b253f18ed301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/windows/shell	145	4	5	1	4611686018427387906	21	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1152	4780	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:44:23 PM	53b2b737-8ef1-0000-6db9-b253f18ed301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully	132	4	10	2	4611686018427387906	20	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1152	2624	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:44:23 PM	53b2b737-8ef1-0000-6db9-b253f18ed301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/config/listener	145	4	5	1	4611686018427387906	19	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1152	4780	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:44:23 PM	53b2b737-8ef1-0000-6db9-b253f18ed301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully	209	4	11	0	4611686018427387908	18	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1400	2064	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 5:42:11 PM	53b2b737-8ef1-0002-53b7-b253f18ed301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting	208	4	11	1	4611686018427387908	17	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1400	2064	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 5:42:11 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully	212	4	11	2	4611686018427387908	16	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1140	1660	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 5:41:56 PM	a4626349-8ea8-0002-0e64-62a4a88ed301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping	211	4	11	0	4611686018427387908	15	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1140	1660	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 5:41:55 PM	a4626349-8ea8-0002-0e64-62a4a88ed301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully	132	4	10	2	4611686018427387906	14	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	924	1564	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:34:06 PM	a4626349-8ea8-0003-b36d-62a4a88ed301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/windows/shell	145	4	5	1	4611686018427387906	13	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	924	3696	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:34:06 PM	a4626349-8ea8-0003-b36d-62a4a88ed301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully	132	4	10	2	4611686018427387906	12	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	924	2368	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:34:06 PM	a4626349-8ea8-0003-b36d-62a4a88ed301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/config/listener	145	4	5	1	4611686018427387906	11	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	924	3696	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:34:06 PM	a4626349-8ea8-0003-b36d-62a4a88ed301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully	132	4	10	2	4611686018427387906	10	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	924	2888	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:06:17 PM	a4626349-8ea8-0000-8a6d-62a4a88ed301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/windows/shell	145	4	5	1	4611686018427387906	9	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	924	1992	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:06:17 PM	a4626349-8ea8-0000-8a6d-62a4a88ed301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration completed successfully	132	4	10	2	4611686018427387906	8	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	924	2480	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:06:17 PM	a4626349-8ea8-0000-8a6d-62a4a88ed301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Response handling	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/config/listener	145	4	5	1	4611686018427387906	7	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	924	1992	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:06:17 PM	a4626349-8ea8-0000-8a6d-62a4a88ed301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	WSMan API call	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service started successfully	209	4	11	0	4611686018427387908	6	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1140	2088	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 5:01:59 PM	a4626349-8ea8-0002-0e64-62a4a88ed301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting	208	4	11	1	4611686018427387908	5	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1140	2088	WIN-5T344G8GM1H	S-1-5-20	1/16/2018 5:01:59 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service was stopped successfully	212	4	11	2	4611686018427387908	4	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1644	1380	WIN-PD8DQPRRTAO	S-1-5-20	1/16/2018 5:01:16 PM	60e27e42-8f3f-0001-c27e-e2603f8fd301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Stop	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is stopping	211	4	11	0	4611686018427387908	3	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1644	1380	WIN-PD8DQPRRTAO	S-1-5-20	1/16/2018 5:01:16 PM	60e27e42-8f3f-0001-c27e-e2603f8fd301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is unable to start because of a failure during initialization. The error code is 2	210	2	11	2	4611686018427387908	2	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1644	1380	WIN-PD8DQPRRTAO	S-1-5-20	1/16/2018 5:01:16 PM	60e27e42-8f3f-0001-c27e-e2603f8fd301		microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Stop	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winrm service is starting	208	4	11	1	4611686018427387908	1	Microsoft-Windows-WinRM	a7975c8f-ac13-49f1-87da-5a984a4ab417	Microsoft-Windows-WinRM/Operational	1644	1380	WIN-PD8DQPRRTAO	S-1-5-20	1/16/2018 5:01:16 PM			microsoft-windows-winrm/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	Winrm service start/stop	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]