$$SIEM.  ˜|lX ¬è½j  (Windows Events10win GMT +05:00MBL-CFCTEMS8821002497 4EF5549DB1674A63BE848553987D4AEE   äð)±”ID>462420125440x8020%6296043Çñ0ž$MBL-C<ð SubjectUserSid'>S-1-5-180x3e7(_Targe«*~oSYSTEMS©ÏNT AUTHORITY1«!Type'>5Fý¢�Advapi -‘AuthentictrPackage6ŸNegotiate7aWorkst4--%‰æ4'>{O» }DÿTransmittedServicesmm½� KeyLength'ø ƒ3%a¦#ó3C:\Þ\C32\s¤?.ex7�IpAddresÄoIpPort½�Impersont×�'>%%1833ËÿRestrictedAdminModeVÌ€Outbound©Ü? ,×.ÀVirtualAccou+¬ñ wWaLinked2�0+@ElevySTokenS2(_p/Event>