$SIEM.  ˜|lX ¬¶½j  (Windows Events10win GMT +05:00MBL-CFCTEMS8821002497 4EF5549DB1674A63BE848553987D4AEE    äð)±”ID>462420125440x8020%6295789Çñ0ž$MBL-C<ð SubjectUserSid'>S-1-5-180x3e7(_Targe«*~oSYSTEMS©ÏNT AUTHORITY1«!Type'>5Fý¢�Advapi -‘AuthentictrPackage6ŸNegotiate7aWorkst4--%‰æ4'>{O» }DÿTransmittedServicesmm½� KeyLength'ø ƒ3%a¦#ó3C:\Þ\C32\s¤?.ex7�IpAddresÄoIpPort½�Impersont×�'>%%1833ËÿRestrictedAdminModeVÌ€Outbound©Ü? ,×.ÀVirtualAccou+¬4¬WaLinked2�0×@ElevySTokenS2(Öp/Event>