$SIEM.  ˜|lX ¬R½j  (Windows Events10win GMT +05:00MBL-CFCTEMS8821002497 4EF5549DB1674A63BE848553987D4AEE    âð)±”ID>462420125440x8020%6295781Çñ0œ$MBL-C<ð SubjectUserSid'>S-1-5-180x3e7(_Targe«*~oSYSTEMS©ÏNT AUTHORITY1«!Type'>5Fû¢�Advapi -‘AuthenticrrPackage6ŸNegotiate7aWorkst4--%‰ä4'>{M¹ }DÿTransmittedServicesmm½� KeyLength'ö ƒ3%a¦#ó3C:\Ü\C32\s¤?.ex7�IpAddresÄoIpPort½�ImpersontÕ�'>%%1833ËÿRestrictedAdminModeVÌ€Outbound©Ü? ,×.ÀVirtualAccou)¬4¬WaLinked2�0×@ElevwSTokenS2(Öp/Event>