$SIEM.  ˜|lX ¬3½j  (Windows Events10win GMT +05:00MBL-CFCTEMS8821002497 4EF5549DB1674A63BE848553987D4AEE    ãð)±”ID>462420125440x8020%6295785Çñ0�$MBL-C<ð SubjectUserSid'>S-1-5-180x3e7(_Targe«*~oSYSTEMS©ÏNT AUTHORITY1«!Type'>5Fü¢�Advapi -‘AuthenticsrPackage6ŸNegotiate7aWorkst4--%‰å4'>{Nº }DÿTransmittedServicesmm½� KeyLength'÷ ƒ3%a¦#ó3C:\Ý\C32\s¤?.ex7�IpAddresÄoIpPort½�ImpersontÖ�'>%%1833ËÿRestrictedAdminModeVÌ€Outbound©Ü? ,×.ÀVirtualAccou*¬4¬WaLinked2�0×@ElevxSTokenS2(Öp/Event>