System log on \\MSEDGEWIN10:
1814,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/21/2017 7:08:33 AM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start.  "
1813,System,Microsoft-Windows-UserPnp,INFORMATION,MSEDGEWIN10,12/21/2017 7:08:33 AM,20001,SYSTEM\NT AUTHORITY,"Driver Management concluded the process to install driver wpdfs.inf_amd64_86b72dac27e0ea83\wpdfs.inf for Device Instance ID SWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN_TOSHIBA&PROD_TRANSMEMORY&REV_1.00#C412F52D6CA2C07010A83262&0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B} with the following status: 0x0.  "
1812,System,WPDClassInstaller,INFORMATION,MSEDGEWIN10,12/21/2017 7:08:33 AM,24579,None,"Message text not available. "
1811,System,WPDClassInstaller,INFORMATION,MSEDGEWIN10,12/21/2017 7:08:33 AM,24577,None,"Message text not available. "
1810,System,WPDClassInstaller,INFORMATION,MSEDGEWIN10,12/21/2017 7:08:32 AM,24576,None,"Message text not available.  Insertion strings: WPD Device  "
1809,System,Microsoft-Windows-UserPnp,INFORMATION,MSEDGEWIN10,12/21/2017 7:08:29 AM,20003,SYSTEM\NT AUTHORITY,"Driver Management has concluded the process to add Service WUDFWpdFs for Device Instance ID SWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN_TOSHIBA&PROD_TRANSMEMORY&REV_1.00#C412F52D6CA2C07010A83262&0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B} with the following status: 0.  "
1808,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/21/2017 7:08:29 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  WUDFWpdFs  Service File Name:  \SystemRoot\system32\DRIVERS\WUDFRd.sys  Service Type:  kernel mode driver  Service Start Type:  demand start  Service Account:  ?  "
1807,System,Microsoft-Windows-DriverFrameworks-UserMode,INFORMATION,MSEDGEWIN10,12/21/2017 7:08:29 AM,10100,SYSTEM\NT AUTHORITY,"The driver package installation has succeeded.  "
1806,System,Microsoft-Windows-DriverFrameworks-UserMode,INFORMATION,MSEDGEWIN10,12/21/2017 7:08:29 AM,10001,SYSTEM\NT AUTHORITY,"The UMDF service WpdFs (CLSID {112DE495-AC4C-46F8-B663-6A4266C53313}) was installed.  It requires framework version 2.23.0 or higher.  "
1805,System,Microsoft-Windows-DriverFrameworks-UserMode,INFORMATION,MSEDGEWIN10,12/21/2017 7:08:29 AM,10000,SYSTEM\NT AUTHORITY,"A driver package which uses user-mode driver framework version 2.23.0 is being installed on device SWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN_TOSHIBA&PROD_TRANSMEMORY&REV_1.00#C412F52D6CA2C07010A83262&0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B}.  "
1804,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,12/21/2017 7:06:07 AM,7001,SYSTEM\NT AUTHORITY,"User Logon Notification for Customer Experience Improvement Program  "
1803,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/21/2017 6:50:45 AM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start.  "
1802,System,WinRM,INFORMATION,MSEDGEWIN10,12/21/2017 6:48:45 AM,10121,None,"Message text not available. "
1801,System,WinRM,INFORMATION,MSEDGEWIN10,12/21/2017 6:48:45 AM,10148,None,"Message text not available. "
1800,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/21/2017 6:46:41 AM,7026,None,"The following boot-start or system-start driver(s) did not load:   dam  "
1799,System,Service Control Manager,ERROR,MSEDGEWIN10,12/21/2017 6:46:29 AM,7000,None,"The puppet service failed to start due to the following error:   %%1053  "
1798,System,Service Control Manager,ERROR,MSEDGEWIN10,12/21/2017 6:46:29 AM,7009,None,"A timeout was reached (30000 milliseconds) while waiting for the puppet service to connect.  "
1797,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:40 AM,51046,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is started  "
1796,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:39 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'storqosflt' (10.0, 2005-04-24T01:53:05.000000000Z) has successfully loaded and registered with Filter Manager.  "
1795,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:39 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'CldFlt' (10.0, 2066-03-30T01:16:41.000000000Z) has successfully loaded and registered with Filter Manager.  "
1794,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:39 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'luafv' (10.0, 1971-04-04T06:11:08.000000000Z) has successfully loaded and registered with Filter Manager.  "
1793,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:39 AM,50103,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client registered for shutdown notification  "
1792,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:39 AM,50036,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is started  "
1791,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:34 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'wcifs' (10.0, 1973-04-02T03:11:07.000000000Z) has successfully loaded and registered with Filter Manager.  "
1790,System,Microsoft-Windows-Directory-Services-SAM,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:27 AM,16962,SYSTEM\NT AUTHORITY,"Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).  For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.  "
1789,System,Microsoft-Windows-Wininit,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:24 AM,14,SYSTEM\NT AUTHORITY,"Credential Guard (LsaIso.exe) configuration: 0, 0  "
1788,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:09 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 1 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2201  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
1787,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:09 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 0 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2201  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
1786,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:07 AM,508,None,"Message text not available.  Insertion strings: 2  "
1785,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:07 AM,172,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 2 6  "
1784,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:07 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'npsvctrig' (10.0, 2070-05-05T06:38:28.000000000Z) has successfully loaded and registered with Filter Manager.  "
1783,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:06 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileCrypt' (10.0, 2013-05-08T04:49:03.000000000Z) has successfully loaded and registered with Filter Manager.  "
1782,System,Microsoft-Windows-Ntfs,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:04 AM,98,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: C: \Device\HarddiskVolume1 0  "
1781,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:04 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'Wof' (10.0, 2102-10-27T15:46:39.000000000Z) has successfully loaded and registered with Filter Manager.  "
1780,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:04 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileInfo' (10.0, 1983-09-10T00:46:43.000000000Z) has successfully loaded and registered with Filter Manager.  "
1779,System,vmci,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:04 AM,3,None,"VMCI: Using capabilities (0xc).   "
1778,System,Lfsvc,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:45 AM,1,None,"Geolocation positioning is enabled.  "
1777,System,Lfsvc,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:45 AM,1,None,"Geolocation positioning is enabled.  "
1776,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:01 AM,32,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  "
1775,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:01 AM,18,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
1774,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:01 AM,25,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
1773,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:01 AM,27,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  NOEXECUTE=OPTIN  "
1772,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:01 AM,20,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: true true 19 2  "
1771,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:01 AM,153,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0 0 0  "
1770,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:01 AM,12,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 10 0 16299 125 0 0 2017-12-21T14:45:01.498727600Z  "
1769,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:21 AM,13,None,"Message text not available.  Insertion strings: 2017-12-21T13:58:21.243812900Z  "
1768,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:21 AM,109,None,"Message text not available.  Insertion strings: 5 0 5  "
1767,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:17 AM,50037,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is stopped. ShutDown Flag value is 1  "
1766,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:17 AM,51047,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is stopped. ShutDown Flag value is 1  "
1765,System,EventLog,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:37 AM,6013,None,"The system uptime is 35 seconds.  "
1764,System,EventLog,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:36 AM,6005,None,"The Event log service was started.  "
1763,System,EventLog,INFORMATION,MSEDGEWIN10,12/21/2017 6:45:36 AM,6009,None,"Microsoft (R) Windows (R) 10.00. 16299 ? Multiprocessor Free.  "
1762,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:17 AM,50106,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 is waiting on DHCPv6 service to stop  "
1761,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:17 AM,50105,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT  "
1760,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:17 AM,50104,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client received shutdown notification  "
1759,System,EventLog,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:17 AM,6006,None,"The Event log service was stopped.  "
1758,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:16 AM,7002,SYSTEM\NT AUTHORITY,"User Logoff Notification for Customer Experience Improvement Program  "
1757,System,User32,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:14 AM,1074,SYSTEM\NT AUTHORITY,"The process C:\Program Files\VMware\VMware Tools\vmtoolsd.exe (MSEDGEWIN10) has initiated the restart of computer MSEDGEWIN10 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown   Reason Code: 0x80070000   Shutdown Type: restart   Comment: ?  "
1756,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:09 AM,7026,None,"The following boot-start or system-start driver(s) did not load:   dam  "
1755,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:05 AM,7001,SYSTEM\NT AUTHORITY,"User Logon Notification for Customer Experience Improvement Program  "
1754,System,Lfsvc,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:05 AM,1,None,"Geolocation positioning is enabled.  "
1753,System,Lfsvc,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:05 AM,1,None,"Geolocation positioning is enabled.  "
1752,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:05 AM,51046,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is started  "
1751,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:05 AM,50103,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client registered for shutdown notification  "
1750,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:05 AM,50036,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is started  "
1749,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:04 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'storqosflt' (10.0, 2005-04-24T01:53:05.000000000Z) has successfully loaded and registered with Filter Manager.  "
1748,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:04 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'CldFlt' (10.0, 2066-03-30T01:16:41.000000000Z) has successfully loaded and registered with Filter Manager.  "
1747,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:04 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'luafv' (10.0, 1971-04-04T06:11:08.000000000Z) has successfully loaded and registered with Filter Manager.  "
1746,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:04 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'wcifs' (10.0, 1973-04-02T03:11:07.000000000Z) has successfully loaded and registered with Filter Manager.  "
1745,System,Microsoft-Windows-Directory-Services-SAM,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:03 AM,16962,SYSTEM\NT AUTHORITY,"Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).  For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.  "
1744,System,Microsoft-Windows-Wininit,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:03 AM,14,SYSTEM\NT AUTHORITY,"Credential Guard (LsaIso.exe) configuration: 0, 0  "
1743,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:01 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 1 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2201  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
1742,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:01 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 0 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2201  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
1741,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:00 AM,508,None,"Message text not available.  Insertion strings: 2  "
1740,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:00 AM,172,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 2 6  "
1739,System,Microsoft-Windows-Kernel-Power,UNKNOWN TYPE,MSEDGEWIN10,12/21/2017 5:58:00 AM,41,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0 0x0 0x0 0x0 0x0 0 0 0 0 false 0 0 true 0  "
1738,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:00 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'npsvctrig' (10.0, 2070-05-05T06:38:28.000000000Z) has successfully loaded and registered with Filter Manager.  "
1737,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:00 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileCrypt' (10.0, 2013-05-08T04:49:03.000000000Z) has successfully loaded and registered with Filter Manager.  "
1736,System,Microsoft-Windows-Ntfs,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:00 AM,98,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: C: \Device\HarddiskVolume1 0  "
1735,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:00 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'Wof' (10.0, 2102-10-27T15:46:39.000000000Z) has successfully loaded and registered with Filter Manager.  "
1734,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:00 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileInfo' (10.0, 1983-09-10T00:46:43.000000000Z) has successfully loaded and registered with Filter Manager.  "
1733,System,vmci,INFORMATION,MSEDGEWIN10,12/21/2017 5:57:59 AM,3,None,"VMCI: Using capabilities (0xc).   "
1732,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/21/2017 5:57:57 AM,32,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  "
1731,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/21/2017 5:57:57 AM,18,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
1730,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/21/2017 5:57:57 AM,25,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
1729,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/21/2017 5:57:57 AM,27,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  NOEXECUTE=OPTIN  "
1728,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/21/2017 5:57:57 AM,20,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: false true 18 2  "
1727,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/21/2017 5:57:57 AM,153,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0 0 0  "
1726,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/21/2017 5:57:57 AM,12,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 10 0 16299 125 0 0 2017-12-21T13:57:57.489906600Z  "
1725,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/21/2017 5:57:08 AM,13,None,"Message text not available.  Insertion strings: 2017-12-21T13:57:08.068673100Z  "
1724,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/21/2017 5:57:07 AM,109,None,"Message text not available.  Insertion strings: 5 0 5  "
1723,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/21/2017 5:57:03 AM,50037,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is stopped. ShutDown Flag value is 1  "
1722,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/21/2017 5:57:03 AM,50106,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 is waiting on DHCPv6 service to stop  "
1721,System,EventLog,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:04 AM,6013,None,"The system uptime is 7 seconds.  "
1720,System,EventLog,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:04 AM,6005,None,"The Event log service was started.  "
1719,System,EventLog,INFORMATION,MSEDGEWIN10,12/21/2017 5:58:04 AM,6009,None,"Microsoft (R) Windows (R) 10.00. 16299 ? Multiprocessor Free.  "
1718,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,12/21/2017 5:57:03 AM,51047,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is stopped. ShutDown Flag value is 1  "
1717,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/21/2017 5:57:03 AM,50105,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT  "
1716,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/21/2017 5:57:03 AM,50104,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client received shutdown notification  "
1715,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,12/21/2017 5:57:02 AM,7002,SYSTEM\NT AUTHORITY,"User Logoff Notification for Customer Experience Improvement Program  "
1714,System,DCOM,ERROR,MSEDGEWIN10,12/21/2017 5:57:02 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: Microsoft.WindowsStore_11711.1001.5.0_x64__8wekyb3d8bbwe!App.AppX8h0bdkbb5frkt9s09fvshhbvqnntmvm1.mca  "
1713,System,DCOM,ERROR,MSEDGEWIN10,12/21/2017 5:57:02 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}  "
1712,System,EventLog,INFORMATION,MSEDGEWIN10,12/21/2017 5:57:03 AM,6006,None,"The Event log service was stopped.  "
1711,System,User32,INFORMATION,MSEDGEWIN10,12/21/2017 5:57:00 AM,1074,IEUser\MSEDGEWIN10,"The process C:\Windows\system32\winlogon.exe (MSEDGEWIN10) has initiated the restart of computer MSEDGEWIN10 on behalf of user MSEDGEWIN10\IEUser for the following reason: No title for this reason could be found   Reason Code: 0x500ff   Shutdown Type: restart   Comment: ?  "
1710,System,Microsoft-Windows-UserPnp,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:50 AM,20001,SYSTEM\NT AUTHORITY,"Driver Management concluded the process to install driver vmusbmouse.inf_amd64_b47444d422028d98\vmusbmouse.inf for Device Instance ID HID\VID_0E0F&PID_0003&MI_01\8&53AA546&0&0000 with the following status: 0x0.  "
1709,System,Microsoft-Windows-UserPnp,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:50 AM,20001,SYSTEM\NT AUTHORITY,"Driver Management concluded the process to install driver vmusbmouse.inf_amd64_b47444d422028d98\vmusbmouse.inf for Device Instance ID HID\VID_0E0F&PID_0003&MI_00\8&1E9C987C&0&0000 with the following status: 0x0.  "
1708,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:50 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  VMware USB Pointing Device  Service File Name:  \SystemRoot\System32\drivers\vmusbmouse.sys  Service Type:  kernel mode driver  Service Start Type:  demand start  Service Account:  ?  "
1707,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:50 AM,7026,None,"The following boot-start or system-start driver(s) did not load:   dam  "
1706,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:45 AM,7001,SYSTEM\NT AUTHORITY,"User Logon Notification for Customer Experience Improvement Program  "
1705,System,Lfsvc,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:45 AM,1,None,"Geolocation positioning is enabled.  "
1704,System,Lfsvc,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:45 AM,1,None,"Geolocation positioning is enabled.  "
1703,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:44 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'storqosflt' (10.0, 2005-04-24T01:53:05.000000000Z) has successfully loaded and registered with Filter Manager.  "
1702,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:44 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'CldFlt' (10.0, 2066-03-30T01:16:41.000000000Z) has successfully loaded and registered with Filter Manager.  "
1701,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:44 AM,51046,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is started  "
1700,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:44 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'luafv' (10.0, 1971-04-04T06:11:08.000000000Z) has successfully loaded and registered with Filter Manager.  "
1699,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:44 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'wcifs' (10.0, 1973-04-02T03:11:07.000000000Z) has successfully loaded and registered with Filter Manager.  "
1698,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:44 AM,50103,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client registered for shutdown notification  "
1697,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:44 AM,50036,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is started  "
1696,System,Microsoft-Windows-Directory-Services-SAM,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:43 AM,16962,SYSTEM\NT AUTHORITY,"Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).  For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.  "
1695,System,Microsoft-Windows-Wininit,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:43 AM,14,SYSTEM\NT AUTHORITY,"Credential Guard (LsaIso.exe) configuration: 0, 0  "
1694,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:40 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 1 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2201  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
1693,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:40 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 0 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2201  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
1692,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:40 AM,508,None,"Message text not available.  Insertion strings: 2  "
1691,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:40 AM,172,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 2 6  "
1690,System,Microsoft-Windows-Kernel-Power,UNKNOWN TYPE,MSEDGEWIN10,12/21/2017 5:56:40 AM,41,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0 0x0 0x0 0x0 0x0 0 0 0 0 false 0 0 true 0  "
1689,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:40 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'npsvctrig' (10.0, 2070-05-05T06:38:28.000000000Z) has successfully loaded and registered with Filter Manager.  "
1688,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:40 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileCrypt' (10.0, 2013-05-08T04:49:03.000000000Z) has successfully loaded and registered with Filter Manager.  "
1687,System,Microsoft-Windows-Ntfs,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:40 AM,98,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: C: \Device\HarddiskVolume1 0  "
1686,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:39 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'Wof' (10.0, 2102-10-27T15:46:39.000000000Z) has successfully loaded and registered with Filter Manager.  "
1685,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:39 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileInfo' (10.0, 1983-09-10T00:46:43.000000000Z) has successfully loaded and registered with Filter Manager.  "
1684,System,vmci,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:39 AM,3,None,"VMCI: Using capabilities (0xc).   "
1683,System,EventLog,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:44 AM,6013,None,"The system uptime is 6 seconds.  "
1682,System,EventLog,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:44 AM,6005,None,"The Event log service was started.  "
1681,System,EventLog,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:44 AM,6009,None,"Microsoft (R) Windows (R) 10.00. 16299 ? Multiprocessor Free.  "
1680,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:37 AM,32,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  "
1679,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:37 AM,18,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
1678,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:37 AM,25,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
1677,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:37 AM,27,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  NOEXECUTE=OPTIN  "
1676,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:37 AM,20,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: true true 16 2  "
1675,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:37 AM,153,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0 0 0  "
1674,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/21/2017 5:56:37 AM,12,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 10 0 16299 125 0 0 2017-12-21T13:56:37.499993100Z  "
1673,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,12/20/2017 7:01:12 AM,51047,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is stopped. ShutDown Flag value is 1  "
1672,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 7:01:12 AM,50105,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT  "
1671,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 7:01:12 AM,50104,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client received shutdown notification  "
1670,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,12/20/2017 7:01:12 AM,7002,SYSTEM\NT AUTHORITY,"User Logoff Notification for Customer Experience Improvement Program  "
1669,System,EventLog,INFORMATION,MSEDGEWIN10,12/20/2017 7:01:12 AM,6006,None,"The Event log service was stopped.  "
1668,System,User32,INFORMATION,MSEDGEWIN10,12/20/2017 7:01:01 AM,1074,IEUser\MSEDGEWIN10,"The process C:\Windows\system32\winlogon.exe (MSEDGEWIN10) has initiated the power off of computer MSEDGEWIN10 on behalf of user MSEDGEWIN10\IEUser for the following reason: No title for this reason could be found   Reason Code: 0x500ff   Shutdown Type: power off   Comment: ?  "
1667,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/20/2017 7:00:04 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 116 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Windows.HolographicFirstRun_cw5n1h2txyewy\Settings\settings.dat 1 1  "
1666,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:32 AM,7026,None,"The following boot-start or system-start driver(s) did not load:   dam  "
1665,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:28 AM,7001,SYSTEM\NT AUTHORITY,"User Logon Notification for Customer Experience Improvement Program  "
1664,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:27 AM,51046,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is started  "
1663,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:27 AM,50103,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client registered for shutdown notification  "
1662,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:27 AM,50036,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is started  "
1661,System,Lfsvc,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:28 AM,1,None,"Geolocation positioning is enabled.  "
1660,System,Lfsvc,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:28 AM,1,None,"Geolocation positioning is enabled.  "
1659,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:27 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'storqosflt' (10.0, 2005-04-24T01:53:05.000000000Z) has successfully loaded and registered with Filter Manager.  "
1658,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:27 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'CldFlt' (10.0, 2066-03-30T01:16:41.000000000Z) has successfully loaded and registered with Filter Manager.  "
1657,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:27 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'luafv' (10.0, 1971-04-04T06:11:08.000000000Z) has successfully loaded and registered with Filter Manager.  "
1656,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:27 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'wcifs' (10.0, 1973-04-02T03:11:07.000000000Z) has successfully loaded and registered with Filter Manager.  "
1655,System,Microsoft-Windows-Directory-Services-SAM,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:26 AM,16962,SYSTEM\NT AUTHORITY,"Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).  For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.  "
1654,System,Microsoft-Windows-Wininit,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:26 AM,14,SYSTEM\NT AUTHORITY,"Credential Guard (LsaIso.exe) configuration: 0, 0  "
1653,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:25 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 1 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2201  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
1652,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:25 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 0 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2201  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
1651,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:25 AM,508,None,"Message text not available.  Insertion strings: 2  "
1650,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:25 AM,172,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 2 6  "
1649,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:25 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'npsvctrig' (10.0, 2070-05-05T06:38:28.000000000Z) has successfully loaded and registered with Filter Manager.  "
1648,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:25 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileCrypt' (10.0, 2013-05-08T04:49:03.000000000Z) has successfully loaded and registered with Filter Manager.  "
1647,System,Microsoft-Windows-Ntfs,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:24 AM,98,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: C: \Device\HarddiskVolume1 0  "
1646,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:24 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'Wof' (10.0, 2102-10-27T15:46:39.000000000Z) has successfully loaded and registered with Filter Manager.  "
1645,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:24 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileInfo' (10.0, 1983-09-10T00:46:43.000000000Z) has successfully loaded and registered with Filter Manager.  "
1644,System,vmci,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:24 AM,3,None,"VMCI: Using capabilities (0xc).   "
1643,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:22 AM,32,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  "
1642,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:22 AM,18,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
1641,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:22 AM,25,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
1640,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:22 AM,27,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  NOEXECUTE=OPTIN  "
1639,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:22 AM,20,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: true true 13 2  "
1638,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:22 AM,153,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0 0 0  "
1637,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:22 AM,12,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 10 0 16299 125 0 0 2017-12-20T14:59:22.489598100Z  "
1636,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:13 AM,13,None,"Message text not available.  Insertion strings: 2017-12-20T14:59:13.886320100Z  "
1635,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:13 AM,109,None,"Message text not available.  Insertion strings: 5 0 5  "
1634,System,EventLog,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:27 AM,6013,None,"The system uptime is 4 seconds.  "
1633,System,EventLog,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:27 AM,6005,None,"The Event log service was started.  "
1632,System,EventLog,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:27 AM,6009,None,"Microsoft (R) Windows (R) 10.00. 16299 ? Multiprocessor Free.  "
1631,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:11 AM,50037,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is stopped. ShutDown Flag value is 1  "
1630,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:11 AM,50106,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 is waiting on DHCPv6 service to stop  "
1629,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:11 AM,51047,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is stopped. ShutDown Flag value is 1  "
1628,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:10 AM,50105,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT  "
1627,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:10 AM,50104,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client received shutdown notification  "
1626,System,EventLog,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:11 AM,6006,None,"The Event log service was stopped.  "
1625,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:10 AM,7002,SYSTEM\NT AUTHORITY,"User Logoff Notification for Customer Experience Improvement Program  "
1624,System,User32,INFORMATION,MSEDGEWIN10,12/20/2017 6:59:09 AM,1074,IEUser\MSEDGEWIN10,"The process C:\Windows\system32\winlogon.exe (MSEDGEWIN10) has initiated the restart of computer MSEDGEWIN10 on behalf of user MSEDGEWIN10\IEUser for the following reason: No title for this reason could be found   Reason Code: 0x500ff   Shutdown Type: restart   Comment: ?  "
1623,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:45 AM,7026,None,"The following boot-start or system-start driver(s) did not load:   dam  "
1622,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:42 AM,7001,SYSTEM\NT AUTHORITY,"User Logon Notification for Customer Experience Improvement Program  "
1621,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:41 AM,51046,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is started  "
1620,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:41 AM,50103,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client registered for shutdown notification  "
1619,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:41 AM,50036,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is started  "
1618,System,Lfsvc,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:42 AM,1,None,"Geolocation positioning is enabled.  "
1617,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:41 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'storqosflt' (10.0, 2005-04-24T01:53:05.000000000Z) has successfully loaded and registered with Filter Manager.  "
1616,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:41 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'CldFlt' (10.0, 2066-03-30T01:16:41.000000000Z) has successfully loaded and registered with Filter Manager.  "
1615,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:41 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'luafv' (10.0, 1971-04-04T06:11:08.000000000Z) has successfully loaded and registered with Filter Manager.  "
1614,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:41 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'wcifs' (10.0, 1973-04-02T03:11:07.000000000Z) has successfully loaded and registered with Filter Manager.  "
1613,System,Microsoft-Windows-Directory-Services-SAM,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:40 AM,16962,SYSTEM\NT AUTHORITY,"Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).  For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.  "
1612,System,Microsoft-Windows-Wininit,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:40 AM,14,SYSTEM\NT AUTHORITY,"Credential Guard (LsaIso.exe) configuration: 0, 0  "
1611,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:39 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 1 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2201  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
1610,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:39 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 0 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2201  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
1609,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:39 AM,508,None,"Message text not available.  Insertion strings: 2  "
1608,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:39 AM,172,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 2 6  "
1607,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:38 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'npsvctrig' (10.0, 2070-05-05T06:38:28.000000000Z) has successfully loaded and registered with Filter Manager.  "
1606,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:38 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileCrypt' (10.0, 2013-05-08T04:49:03.000000000Z) has successfully loaded and registered with Filter Manager.  "
1605,System,Microsoft-Windows-Ntfs,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:38 AM,98,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: C: \Device\HarddiskVolume1 0  "
1604,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:38 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'Wof' (10.0, 2102-10-27T15:46:39.000000000Z) has successfully loaded and registered with Filter Manager.  "
1603,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:38 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileInfo' (10.0, 1983-09-10T00:46:43.000000000Z) has successfully loaded and registered with Filter Manager.  "
1602,System,vmci,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:38 AM,3,None,"VMCI: Using capabilities (0xc).   "
1601,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:36 AM,32,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  "
1600,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:36 AM,18,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
1599,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:36 AM,25,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
1598,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:36 AM,27,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  NOEXECUTE=OPTIN  "
1597,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:36 AM,20,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: true true 12 2  "
1596,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:36 AM,153,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0 0 0  "
1595,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:36 AM,12,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 10 0 16299 125 0 0 2017-12-20T14:58:36.488396400Z  "
1594,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:26 AM,13,None,"Message text not available.  Insertion strings: 2017-12-20T14:58:26.330824100Z  "
1593,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:26 AM,109,None,"Message text not available.  Insertion strings: 5 0 5  "
1592,System,EventLog,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:41 AM,6013,None,"The system uptime is 4 seconds.  "
1591,System,EventLog,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:41 AM,6005,None,"The Event log service was started.  "
1590,System,EventLog,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:41 AM,6009,None,"Microsoft (R) Windows (R) 10.00. 16299 ? Multiprocessor Free.  "
1589,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:24 AM,50037,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is stopped. ShutDown Flag value is 1  "
1588,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:24 AM,50106,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 is waiting on DHCPv6 service to stop  "
1587,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:24 AM,51047,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is stopped. ShutDown Flag value is 1  "
1586,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:24 AM,50105,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT  "
1585,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:24 AM,50104,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client received shutdown notification  "
1584,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:24 AM,7002,SYSTEM\NT AUTHORITY,"User Logoff Notification for Customer Experience Improvement Program  "
1583,System,DCOM,ERROR,MSEDGEWIN10,12/20/2017 6:58:23 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: microsoft.windowscommunicationsapps_17.8730.21155.0_x64__8wekyb3d8bbwe!microsoft.windowslive.calendar.AppXwkn9j84yh1kvnt49k5r8h6y1ecsv09hs.mca  "
1582,System,EventLog,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:24 AM,6006,None,"The Event log service was stopped.  "
1581,System,DCOM,ERROR,MSEDGEWIN10,12/20/2017 6:58:23 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c!App.AppX85gcbw533amccd2rr8qswxymhfj649t2.mca  "
1580,System,DCOM,ERROR,MSEDGEWIN10,12/20/2017 6:58:23 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}  "
1579,System,DCOM,ERROR,MSEDGEWIN10,12/20/2017 6:58:22 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}  "
1578,System,DCOM,ERROR,MSEDGEWIN10,12/20/2017 6:58:22 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}  "
1577,System,DCOM,ERROR,MSEDGEWIN10,12/20/2017 6:58:21 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: Microsoft.WindowsStore_11711.1001.5.0_x64__8wekyb3d8bbwe!App.AppX8h0bdkbb5frkt9s09fvshhbvqnntmvm1.mca  "
1576,System,User32,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:20 AM,1074,IEUser\MSEDGEWIN10,"The process C:\Windows\system32\winlogon.exe (MSEDGEWIN10) has initiated the restart of computer MSEDGEWIN10 on behalf of user MSEDGEWIN10\IEUser for the following reason: No title for this reason could be found   Reason Code: 0x500ff   Shutdown Type: restart   Comment: ?  "
1575,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:10 AM,7026,None,"The following boot-start or system-start driver(s) did not load:   dam  "
1574,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:08 AM,7001,SYSTEM\NT AUTHORITY,"User Logon Notification for Customer Experience Improvement Program  "
1573,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:07 AM,51046,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is started  "
1572,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:07 AM,50103,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client registered for shutdown notification  "
1571,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:07 AM,50036,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is started  "
1570,System,Lfsvc,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:08 AM,1,None,"Geolocation positioning is enabled.  "
1569,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:07 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'storqosflt' (10.0, 2005-04-24T01:53:05.000000000Z) has successfully loaded and registered with Filter Manager.  "
1568,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:07 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'CldFlt' (10.0, 2066-03-30T01:16:41.000000000Z) has successfully loaded and registered with Filter Manager.  "
1567,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:07 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'luafv' (10.0, 1971-04-04T06:11:08.000000000Z) has successfully loaded and registered with Filter Manager.  "
1566,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:07 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'wcifs' (10.0, 1973-04-02T03:11:07.000000000Z) has successfully loaded and registered with Filter Manager.  "
1565,System,Microsoft-Windows-Directory-Services-SAM,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:06 AM,16962,SYSTEM\NT AUTHORITY,"Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).  For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.  "
1564,System,Microsoft-Windows-Wininit,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:06 AM,14,SYSTEM\NT AUTHORITY,"Credential Guard (LsaIso.exe) configuration: 0, 0  "
1563,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:05 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 1 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2201  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
1562,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:05 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 0 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2201  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
1561,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:05 AM,172,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 2 6  "
1560,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:05 AM,508,None,"Message text not available.  Insertion strings: 2  "
1559,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:05 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'npsvctrig' (10.0, 2070-05-05T06:38:28.000000000Z) has successfully loaded and registered with Filter Manager.  "
1558,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:05 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileCrypt' (10.0, 2013-05-08T04:49:03.000000000Z) has successfully loaded and registered with Filter Manager.  "
1557,System,Microsoft-Windows-Ntfs,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:04 AM,98,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: C: \Device\HarddiskVolume1 0  "
1556,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:04 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'Wof' (10.0, 2102-10-27T15:46:39.000000000Z) has successfully loaded and registered with Filter Manager.  "
1555,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:04 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileInfo' (10.0, 1983-09-10T00:46:43.000000000Z) has successfully loaded and registered with Filter Manager.  "
1554,System,vmci,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:04 AM,3,None,"VMCI: Using capabilities (0xc).   "
1553,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:02 AM,32,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  "
1552,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:02 AM,18,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
1551,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:02 AM,25,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
1550,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:02 AM,27,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  NOEXECUTE=OPTIN  "
1549,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:02 AM,20,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: true true 11 2  "
1548,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:02 AM,153,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0 0 0  "
1547,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:02 AM,12,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 10 0 16299 125 0 0 2017-12-20T14:58:02.487922800Z  "
1546,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:48 AM,13,None,"Message text not available.  Insertion strings: 2017-12-20T14:57:48.660784200Z  "
1545,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:48 AM,109,None,"Message text not available.  Insertion strings: 5 0 5  "
1544,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:45 AM,50037,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is stopped. ShutDown Flag value is 1  "
1543,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:45 AM,50106,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 is waiting on DHCPv6 service to stop  "
1542,System,EventLog,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:07 AM,6013,None,"The system uptime is 5 seconds.  "
1541,System,EventLog,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:07 AM,6005,None,"The Event log service was started.  "
1540,System,EventLog,INFORMATION,MSEDGEWIN10,12/20/2017 6:58:07 AM,6009,None,"Microsoft (R) Windows (R) 10.00. 16299 ? Multiprocessor Free.  "
1539,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:45 AM,51047,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is stopped. ShutDown Flag value is 1  "
1538,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:45 AM,50105,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT  "
1537,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:45 AM,50104,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client received shutdown notification  "
1536,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:45 AM,7002,SYSTEM\NT AUTHORITY,"User Logoff Notification for Customer Experience Improvement Program  "
1535,System,EventLog,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:45 AM,6006,None,"The Event log service was stopped.  "
1534,System,DCOM,ERROR,MSEDGEWIN10,12/20/2017 6:57:44 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: microsoft.windowscommunicationsapps_17.8730.21155.0_x64__8wekyb3d8bbwe!microsoft.windowslive.calendar.AppXwkn9j84yh1kvnt49k5r8h6y1ecsv09hs.mca  "
1533,System,DCOM,ERROR,MSEDGEWIN10,12/20/2017 6:57:44 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D}  "
1532,System,DCOM,ERROR,MSEDGEWIN10,12/20/2017 6:57:44 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D}  "
1531,System,DCOM,ERROR,MSEDGEWIN10,12/20/2017 6:57:44 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D}  "
1530,System,DCOM,ERROR,MSEDGEWIN10,12/20/2017 6:57:43 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D}  "
1529,System,DCOM,ERROR,MSEDGEWIN10,12/20/2017 6:57:43 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D}  "
1528,System,DCOM,ERROR,MSEDGEWIN10,12/20/2017 6:57:42 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c!App.AppX85gcbw533amccd2rr8qswxymhfj649t2.mca  "
1527,System,User32,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:41 AM,1074,IEUser\MSEDGEWIN10,"The process C:\Windows\system32\winlogon.exe (MSEDGEWIN10) has initiated the restart of computer MSEDGEWIN10 on behalf of user MSEDGEWIN10\IEUser for the following reason: No title for this reason could be found   Reason Code: 0x500ff   Shutdown Type: restart   Comment: ?  "
1526,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:41 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 2017-12 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4054517)  "
1525,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:26 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 162 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.HolographicFirstRun_10.0.16299.125_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
1524,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:22 AM,7001,SYSTEM\NT AUTHORITY,"User Logon Notification for Customer Experience Improvement Program  "
1523,System,Microsoft-Windows-UserModePowerService,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:17 AM,12,SYSTEM\NT AUTHORITY,"Process C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.16299.96_none_2c40cc7f3876f2b7\TiWorker.exe (process ID:1352) reset policy scheme from {381B4222-F694-41F0-9685-FF5BB260DF2E} to {381B4222-F694-41F0-9685-FF5BB260DF2E}  "
1522,System,Microsoft-Windows-UserModePowerService,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:17 AM,12,SYSTEM\NT AUTHORITY,"Process C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.16299.96_none_2c40cc7f3876f2b7\TiWorker.exe (process ID:1352) reset policy scheme from {381B4222-F694-41F0-9685-FF5BB260DF2E} to {381B4222-F694-41F0-9685-FF5BB260DF2E}  "
1521,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:15 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 31 \??\C:\Users\Default\NTUSER.DAT 1 1  "
1520,System,Microsoft-Windows-UserModePowerService,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:15 AM,12,SYSTEM\NT AUTHORITY,"Process C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.16299.96_none_2c40cc7f3876f2b7\TiWorker.exe (process ID:1352) reset policy scheme from {381B4222-F694-41F0-9685-FF5BB260DF2E} to {381B4222-F694-41F0-9685-FF5BB260DF2E}  "
1519,System,Microsoft-Windows-UserModePowerService,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:14 AM,12,SYSTEM\NT AUTHORITY,"Process C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.16299.96_none_2c40cc7f3876f2b7\TiWorker.exe (process ID:1352) reset policy scheme from {381B4222-F694-41F0-9685-FF5BB260DF2E} to {381B4222-F694-41F0-9685-FF5BB260DF2E}  "
1518,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:10 AM,7026,None,"The following boot-start or system-start driver(s) did not load:   dam  "
1517,System,Lfsvc,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:06 AM,1,None,"Geolocation positioning is enabled.  "
1516,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:03 AM,51046,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is started  "
1515,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:03 AM,50103,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client registered for shutdown notification  "
1514,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:03 AM,50036,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is started  "
1513,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:03 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'storqosflt' (10.0, 2005-04-24T01:53:05.000000000Z) has successfully loaded and registered with Filter Manager.  "
1512,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:03 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'CldFlt' (10.0, 2066-03-30T01:16:41.000000000Z) has successfully loaded and registered with Filter Manager.  "
1511,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:03 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'luafv' (10.0, 1971-04-04T06:11:08.000000000Z) has successfully loaded and registered with Filter Manager.  "
1510,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:03 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'wcifs' (10.0, 1973-04-02T03:11:07.000000000Z) has successfully loaded and registered with Filter Manager.  "
1509,System,Microsoft-Windows-Directory-Services-SAM,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:01 AM,16962,SYSTEM\NT AUTHORITY,"Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).  For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.  "
1508,System,Microsoft-Windows-Wininit,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:01 AM,14,SYSTEM\NT AUTHORITY,"Credential Guard (LsaIso.exe) configuration: 0, 0  "
1507,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,12/20/2017 6:56:58 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 1 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2201  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
1506,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,12/20/2017 6:56:58 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 0 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2201  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
1505,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/20/2017 6:56:58 AM,508,None,"Message text not available.  Insertion strings: 2  "
1504,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/20/2017 6:56:58 AM,172,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 2 6  "
1503,System,Microsoft-Windows-Kernel-Power,UNKNOWN TYPE,MSEDGEWIN10,12/20/2017 6:56:58 AM,41,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0 0x0 0x0 0x0 0x0 0 0 0 0 false 0 0 true 0  "
1502,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:56:58 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'npsvctrig' (10.0, 2070-05-05T06:38:28.000000000Z) has successfully loaded and registered with Filter Manager.  "
1501,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:56:58 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileCrypt' (10.0, 2013-05-08T04:49:03.000000000Z) has successfully loaded and registered with Filter Manager.  "
1500,System,Microsoft-Windows-Ntfs,INFORMATION,MSEDGEWIN10,12/20/2017 6:56:58 AM,98,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: C: \Device\HarddiskVolume1 0  "
1499,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:56:58 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'Wof' (10.0, 2102-10-27T15:46:39.000000000Z) has successfully loaded and registered with Filter Manager.  "
1498,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/20/2017 6:56:58 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileInfo' (10.0, 1983-09-10T00:46:43.000000000Z) has successfully loaded and registered with Filter Manager.  "
1497,System,vmci,INFORMATION,MSEDGEWIN10,12/20/2017 6:56:57 AM,3,None,"VMCI: Using capabilities (0xc).   "
1496,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:56:55 AM,32,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  "
1495,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:56:55 AM,18,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
1494,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:56:55 AM,25,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
1493,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:56:55 AM,27,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  NOEXECUTE=OPTIN  "
1492,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:56:55 AM,20,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: false true 10 2  "
1491,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/20/2017 6:56:55 AM,153,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0 0 0  "
1490,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/20/2017 6:56:55 AM,12,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 10 0 16299 125 0 0 2017-12-20T14:56:55.499582700Z  "
1489,System,EventLog,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:03 AM,6013,None,"The system uptime is 7 seconds.  "
1488,System,EventLog,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:03 AM,6005,None,"The Event log service was started.  "
1487,System,EventLog,INFORMATION,MSEDGEWIN10,12/20/2017 6:57:03 AM,6009,None,"Microsoft (R) Windows (R) 10.00. 16299 ? Multiprocessor Free.  "
1486,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 5:49:56 AM,50037,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is stopped. ShutDown Flag value is 1  "
1485,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 5:49:56 AM,50106,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 is waiting on DHCPv6 service to stop  "
1484,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,12/20/2017 5:49:56 AM,51047,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is stopped. ShutDown Flag value is 1  "
1483,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 5:49:55 AM,50105,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT  "
1482,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/20/2017 5:49:55 AM,50104,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client received shutdown notification  "
1481,System,EventLog,INFORMATION,MSEDGEWIN10,12/20/2017 5:49:56 AM,6006,None,"The Event log service was stopped.  "
1480,System,WinRM,WARNING,MSEDGEWIN10,12/20/2017 5:49:56 AM,10149,None,"Message text not available. "
1479,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,12/20/2017 5:49:16 AM,7002,SYSTEM\NT AUTHORITY,"User Logoff Notification for Customer Experience Improvement Program  "
1478,System,User32,INFORMATION,MSEDGEWIN10,12/20/2017 5:49:04 AM,1074,IEUser\MSEDGEWIN10,"The process C:\Windows\System32\RuntimeBroker.exe (MSEDGEWIN10) has initiated the power off of computer MSEDGEWIN10 on behalf of user MSEDGEWIN10\IEUser for the following reason: Other (Unplanned)   Reason Code: 0x0   Shutdown Type: power off   Comment: ?  "
1477,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/20/2017 3:56:24 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1476,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/20/2017 3:46:15 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1475,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/20/2017 3:24:36 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1474,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/20/2017 3:24:28 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1473,System,Microsoft-Windows-Time-Service,INFORMATION,MSEDGEWIN10,12/20/2017 3:24:21 AM,37,LOCAL SERVICE\NT AUTHORITY,"The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->52.178.161.41:123).  "
1472,System,Microsoft-Windows-Time-Service,WARNING,MSEDGEWIN10,12/20/2017 3:24:18 AM,134,LOCAL SERVICE\NT AUTHORITY,"NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)  "
1471,System,Microsoft-Windows-Time-Service,WARNING,MSEDGEWIN10,12/20/2017 3:24:17 AM,134,LOCAL SERVICE\NT AUTHORITY,"NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)  "
1470,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/20/2017 3:24:17 AM,1,SYSTEM\NT AUTHORITY,"Possible detection of CVE: 2017-12-20T11:24:17.028000000Z  Additional Information: 2017-12-20T06:38:13.525329300Z    This Event is generated when an attempt to exploit a known vulnerability (2017-12-20T11:24:17.028000000Z) is detected.  This Event is raised by a User mode process.    "
1469,System,Microsoft-Windows-Time-Service,WARNING,MSEDGEWIN10,12/19/2017 10:38:13 PM,134,LOCAL SERVICE\NT AUTHORITY,"NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)  "
1468,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 10:31:36 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1467,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 10:21:27 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1466,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 10:01:10 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1465,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 9:51:01 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1464,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 9:30:44 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1463,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 9:20:35 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1462,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 9:00:18 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1461,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 8:50:09 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1460,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/19/2017 8:46:00 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start.  "
1459,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/19/2017 8:35:07 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Update Orchestrator Service service was changed from demand start to auto start.  "
1458,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/19/2017 8:34:07 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Windows Modules Installer service was changed from demand start to auto start.  "
1457,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/19/2017 8:33:56 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Windows Modules Installer service was changed from auto start to demand start.  "
1456,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/19/2017 8:32:36 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Windows Modules Installer service was changed from demand start to auto start.  "
1455,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 8:32:19 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 2017-12 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4054517)  "
1454,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 8:30:25 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1453,System,Microsoft-Windows-WindowsUpdateClient,ERROR,MSEDGEWIN10,12/19/2017 8:30:25 PM,20,SYSTEM\NT AUTHORITY,"Installation Failure: Windows failed to install the following update with error 0x8024200d: 2017-12 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4054517).  "
1452,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 8:29:40 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 2017-12 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4054517)  "
1451,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 8:28:51 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3PT-Microsoft.ZuneMusic  "
1450,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 8:28:51 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJ3PT-Microsoft.ZuneMusic  "
1449,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 8:28:47 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 98 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
1448,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 8:28:41 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH2JHXJ-Microsoft.MinecraftUWP  "
1447,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 8:28:41 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH2JHXJ-Microsoft.MinecraftUWP  "
1446,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 8:28:37 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 101 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MinecraftUWP_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
1445,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 8:28:34 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 131 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MinecraftUWP_1.2.800.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1444,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 8:28:32 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 135 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneMusic_10.17086.24711.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1443,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 8:28:22 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1442,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 8:28:15 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1441,System,Microsoft-Windows-Time-Service,WARNING,MSEDGEWIN10,12/19/2017 8:28:02 PM,134,LOCAL SERVICE\NT AUTHORITY,"NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)  "
1440,System,Microsoft-Windows-Time-Service,WARNING,MSEDGEWIN10,12/19/2017 8:28:01 PM,134,LOCAL SERVICE\NT AUTHORITY,"NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)  "
1439,System,Microsoft-Windows-Time-Service,WARNING,MSEDGEWIN10,12/19/2017 8:27:28 PM,134,LOCAL SERVICE\NT AUTHORITY,"NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)  "
1438,System,Microsoft-Windows-Time-Service,WARNING,MSEDGEWIN10,12/19/2017 8:27:18 PM,134,LOCAL SERVICE\NT AUTHORITY,"NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)  "
1437,System,Microsoft-Windows-Time-Service,WARNING,MSEDGEWIN10,12/19/2017 8:27:13 PM,134,LOCAL SERVICE\NT AUTHORITY,"NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)  "
1436,System,Microsoft-Windows-Time-Service,WARNING,MSEDGEWIN10,12/19/2017 8:27:01 PM,134,LOCAL SERVICE\NT AUTHORITY,"NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)  "
1435,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 8:26:56 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1434,System,Microsoft-Windows-Time-Service,WARNING,MSEDGEWIN10,12/19/2017 8:26:44 PM,134,LOCAL SERVICE\NT AUTHORITY,"NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)  "
1433,System,Microsoft-Windows-Time-Service,WARNING,MSEDGEWIN10,12/19/2017 8:26:43 PM,134,LOCAL SERVICE\NT AUTHORITY,"NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)  "
1432,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 8:17:55 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1431,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 8:02:03 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1430,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 7:47:56 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name www.bing.com timed out after none of the configured DNS servers responded.  "
1429,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 7:31:59 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name tlu.dl.delivery.mp.microsoft.com timed out after none of the configured DNS servers responded.  "
1428,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 7:17:35 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name watson.telemetry.microsoft.com timed out after none of the configured DNS servers responded.  "
1427,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 7:04:37 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 102 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
1426,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 7:02:15 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name tlu.dl.delivery.mp.microsoft.com timed out after none of the configured DNS servers responded.  "
1425,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 6:46:45 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name tlu.dl.delivery.mp.microsoft.com timed out after none of the configured DNS servers responded.  "
1424,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 6:32:21 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name time.windows.com timed out after none of the configured DNS servers responded.  "
1423,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 6:17:14 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name tlu.dl.delivery.mp.microsoft.com timed out after none of the configured DNS servers responded.  "
1422,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 6:02:04 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name time.windows.com timed out after none of the configured DNS servers responded.  "
1421,System,Microsoft-Windows-UserModePowerService,INFORMATION,MSEDGEWIN10,12/19/2017 5:47:11 PM,12,SYSTEM\NT AUTHORITY,"Process C:\Windows\ImmersiveControlPanel\SystemSettings.exe (process ID:8012) reset policy scheme from {381B4222-F694-41F0-9685-FF5BB260DF2E} to {381B4222-F694-41F0-9685-FF5BB260DF2E}  "
1420,System,Microsoft-Windows-UserModePowerService,INFORMATION,MSEDGEWIN10,12/19/2017 5:47:09 PM,12,SYSTEM\NT AUTHORITY,"Process C:\Windows\ImmersiveControlPanel\SystemSettings.exe (process ID:8012) reset policy scheme from {381B4222-F694-41F0-9685-FF5BB260DF2E} to {381B4222-F694-41F0-9685-FF5BB260DF2E}  "
1419,System,Microsoft-Windows-Time-Service,WARNING,MSEDGEWIN10,12/19/2017 5:46:50 PM,134,LOCAL SERVICE\NT AUTHORITY,"NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)  "
1418,System,Microsoft-Windows-Time-Service,WARNING,MSEDGEWIN10,12/19/2017 5:46:38 PM,134,LOCAL SERVICE\NT AUTHORITY,"NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)  "
1417,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 5:46:33 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1416,System,Microsoft-Windows-Power-Troubleshooter,INFORMATION,MSEDGEWIN10,12/19/2017 5:46:21 PM,1,LOCAL SERVICE\NT AUTHORITY,"The system has returned from a low power state.    Sleep Time: 2017-12-20T01:44:33.826413600Z  Wake Time: 2017-12-20T01:46:18.873443400Z    Wake Source: 1?  "
1415,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 5:46:18 PM,1,None,"Possible detection of CVE: 2017-12-20T01:46:18.500000000Z  Additional Information: 2017-12-20T01:44:39.690142300Z    This Event is generated when an attempt to exploit a known vulnerability (2017-12-20T01:46:18.500000000Z) is detected.  This Event is raised by a User mode process.    "
1414,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/19/2017 5:44:39 PM,107,None,"Message text not available.  Insertion strings: 2 2 2 2434-12-11T00:21:28.312897100Z 2434-12-11T00:21:28.312897100Z 1 1  "
1413,System,Microsoft-Windows-Time-Service,WARNING,MSEDGEWIN10,12/19/2017 5:44:39 PM,134,LOCAL SERVICE\NT AUTHORITY,"NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)  "
1412,System,Microsoft-Windows-Time-Service,WARNING,MSEDGEWIN10,12/19/2017 5:44:37 PM,134,LOCAL SERVICE\NT AUTHORITY,"NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)  "
1411,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/19/2017 5:44:34 PM,42,None,"Message text not available.  Insertion strings: 2 2 7 0 1  "
1410,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 5:39:19 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name tlu.dl.delivery.mp.microsoft.com timed out after none of the configured DNS servers responded.  "
1409,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 5:23:58 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name time.windows.com timed out after none of the configured DNS servers responded.  "
1408,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/19/2017 5:10:11 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Windows Modules Installer service was changed from auto start to demand start.  "
1407,System,Microsoft-Windows-Time-Service,WARNING,MSEDGEWIN10,12/19/2017 5:08:44 PM,134,LOCAL SERVICE\NT AUTHORITY,"NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)  "
1406,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 5:08:38 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name tlu.dl.delivery.mp.microsoft.com timed out after none of the configured DNS servers responded.  "
1405,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 5:08:30 PM,1,SYSTEM\NT AUTHORITY,"Possible detection of CVE: 2017-12-20T01:08:30.874000000Z  Additional Information: 2017-12-20T00:19:13.693642300Z    This Event is generated when an attempt to exploit a known vulnerability (2017-12-20T01:08:30.874000000Z) is detected.  This Event is raised by a User mode process.    "
1404,System,Microsoft-Windows-Time-Service,WARNING,MSEDGEWIN10,12/19/2017 4:19:13 PM,134,LOCAL SERVICE\NT AUTHORITY,"NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)  "
1403,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 4:17:53 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name ars.smartscreen.microsoft.com timed out after none of the configured DNS servers responded.  "
1402,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 4:02:57 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name settings-win.data.microsoft.com timed out after none of the configured DNS servers responded.  "
1401,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:58:31 PM,15,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 52 \??\C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT 12046336 11681792  "
1400,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/19/2017 3:58:30 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Windows Modules Installer service was changed from demand start to auto start.  "
1399,System,Microsoft-Windows-Time-Service,WARNING,MSEDGEWIN10,12/19/2017 3:58:28 PM,134,LOCAL SERVICE\NT AUTHORITY,"NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)  "
1398,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/19/2017 3:58:28 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Windows Modules Installer service was changed from auto start to demand start.  "
1397,System,Microsoft-Windows-Time-Service,WARNING,MSEDGEWIN10,12/19/2017 3:58:26 PM,134,LOCAL SERVICE\NT AUTHORITY,"NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)  "
1396,System,Microsoft-Windows-Time-Service,WARNING,MSEDGEWIN10,12/19/2017 3:58:26 PM,134,LOCAL SERVICE\NT AUTHORITY,"NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)  "
1395,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/19/2017 3:58:12 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Windows Modules Installer service was changed from demand start to auto start.  "
1394,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:58:10 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 85 \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat 0 0  "
1393,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:51:49 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1392,System,Microsoft-Windows-WindowsUpdateClient,ERROR,MSEDGEWIN10,12/19/2017 3:51:49 PM,20,SYSTEM\NT AUTHORITY,"Installation Failure: Windows failed to install the following update with error 0x8024200d: 2017-12 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4054517).  "
1391,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/19/2017 3:51:47 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start.  "
1390,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:51:34 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 2017-12 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4054517)  "
1389,System,WinRM,INFORMATION,MSEDGEWIN10,12/19/2017 3:49:46 PM,10121,None,"Message text not available. "
1388,System,WinRM,INFORMATION,MSEDGEWIN10,12/19/2017 3:49:46 PM,10148,None,"Message text not available. "
1387,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:48:06 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 101 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat 10 0  "
1386,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:49 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 104 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat 43 13  "
1385,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:49 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 116 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat 4 1  "
1384,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 3:47:48 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1383,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:47 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Windows Defender Antivirus Mini-Filter Driver service was changed from boot start to demand start.  "
1382,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:47 PM,1,SYSTEM\NT AUTHORITY,"File System Filter 'WdFilter' (Version 10.0, 2001-08-08T06:54:57.000000000Z) unloaded successfully.  "
1381,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:47 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Windows Defender Antivirus Boot Driver service was changed from boot start to demand start.  "
1380,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:46 PM,7026,None,"The following boot-start or system-start driver(s) did not load:   dam  "
1379,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:44 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the WinDefend service was changed from auto start to demand start.  "
1378,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:43 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 45 \??\C:\Windows\AppCompat\Programs\Amcache.hve 785 298  "
1377,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:42 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 69 \??\C:\Users\sshd_server\AppData\Local\Microsoft\Windows\UsrClass.dat 4 1  "
1376,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:42 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 35 \??\C:\Users\sshd_server\ntuser.dat 52 16  "
1375,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:42 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 64 \??\C:\Users\IEUser\AppData\Local\Microsoft\Windows\UsrClass.dat 4949 625  "
1374,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:41 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 30 \??\C:\Users\IEUser\ntuser.dat 2079 223  "
1373,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:41 PM,7001,SYSTEM\NT AUTHORITY,"User Logon Notification for Customer Experience Improvement Program  "
1372,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:40 PM,51046,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is started  "
1371,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:40 PM,50103,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client registered for shutdown notification  "
1370,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:40 PM,50036,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is started  "
1369,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:40 PM,6,SYSTEM\NT AUTHORITY,"File System Filter 'storqosflt' (10.0, 2005-04-24T01:53:05.000000000Z) has successfully loaded and registered with Filter Manager.  "
1368,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:40 PM,6,SYSTEM\NT AUTHORITY,"File System Filter 'CldFlt' (10.0, 2066-03-30T01:16:41.000000000Z) has successfully loaded and registered with Filter Manager.  "
1367,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:40 PM,6,SYSTEM\NT AUTHORITY,"File System Filter 'luafv' (10.0, 1971-04-04T06:11:08.000000000Z) has successfully loaded and registered with Filter Manager.  "
1366,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:40 PM,6,SYSTEM\NT AUTHORITY,"File System Filter 'wcifs' (10.0, 1973-04-02T03:11:07.000000000Z) has successfully loaded and registered with Filter Manager.  "
1365,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:40 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 54 \??\C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT 123 20  "
1364,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:40 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 31 \SystemRoot\System32\Config\BBI 260 53  "
1363,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:40 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 56 \??\C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT 105 17  "
1362,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:39 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 31 \SystemRoot\System32\Config\SAM 72 7  "
1361,System,Microsoft-Windows-Directory-Services-SAM,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:39 PM,16962,SYSTEM\NT AUTHORITY,"Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).  For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.  "
1360,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:39 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 36 \SystemRoot\System32\Config\SECURITY 92 6  "
1359,System,Microsoft-Windows-Wininit,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:39 PM,14,SYSTEM\NT AUTHORITY,"Credential Guard (LsaIso.exe) configuration: 0, 0  "
1358,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:39 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 35 \SystemRoot\System32\Config\DEFAULT 224 34  "
1357,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:38 PM,15,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 36 \SystemRoot\System32\Config\SOFTWARE 73252864 72302592  "
1356,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:36 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 32 \Device\HarddiskVolume1\Boot\BCD 18 4  "
1355,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:36 PM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 1 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2201  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
1354,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:36 PM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 0 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2201  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
1353,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:36 PM,508,None,"Message text not available.  Insertion strings: 2  "
1352,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:36 PM,172,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 2 6  "
1351,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:36 PM,6,SYSTEM\NT AUTHORITY,"File System Filter 'npsvctrig' (10.0, 2070-05-05T06:38:28.000000000Z) has successfully loaded and registered with Filter Manager.  "
1350,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:36 PM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileCrypt' (10.0, 2013-05-08T04:49:03.000000000Z) has successfully loaded and registered with Filter Manager.  "
1349,System,Lfsvc,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:40 PM,1,None,"Geolocation positioning is enabled.  "
1348,System,Microsoft-Windows-Ntfs,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:36 PM,98,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: C: \Device\HarddiskVolume1 0  "
1347,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:35 PM,6,SYSTEM\NT AUTHORITY,"File System Filter 'WdFilter' (10.0, 2001-08-08T06:54:57.000000000Z) has successfully loaded and registered with Filter Manager.  "
1346,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:35 PM,6,SYSTEM\NT AUTHORITY,"File System Filter 'Wof' (10.0, 2102-10-27T15:46:39.000000000Z) has successfully loaded and registered with Filter Manager.  "
1345,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:35 PM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileInfo' (10.0, 1983-09-10T00:46:43.000000000Z) has successfully loaded and registered with Filter Manager.  "
1344,System,vmci,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:35 PM,3,None,"VMCI: Using capabilities (0xc).   "
1343,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:33 PM,32,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  "
1342,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:33 PM,18,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
1341,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:33 PM,25,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
1340,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:33 PM,27,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  NOEXECUTE=OPTIN  "
1339,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:33 PM,20,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: true true 8 2  "
1338,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:33 PM,153,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0 0 0  "
1337,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:33 PM,12,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 10 0 16299 64 0 0 2017-12-19T23:47:33.488380100Z  "
1336,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:23 PM,13,None,"Message text not available.  Insertion strings: 2017-12-19T23:47:23.117875500Z  "
1335,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:21 PM,109,None,"Message text not available.  Insertion strings: 5 0 5  "
1334,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:17 PM,50037,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is stopped. ShutDown Flag value is 1  "
1333,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:17 PM,50106,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 is waiting on DHCPv6 service to stop  "
1332,System,EventLog,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:40 PM,6013,None,"The system uptime is 7 seconds.  "
1331,System,EventLog,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:40 PM,6005,None,"The Event log service was started.  "
1330,System,EventLog,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:40 PM,6009,None,"Microsoft (R) Windows (R) 10.00. 16299 ? Multiprocessor Free.  "
1329,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:17 PM,51057,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service stop is almost done.DHCP Context Ref count is 1  "
1328,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:17 PM,51057,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service stop is almost done.DHCP Context Ref count is 1  "
1327,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:17 PM,51047,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is stopped. ShutDown Flag value is 1  "
1326,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:16 PM,50105,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT  "
1325,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:16 PM,50104,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client received shutdown notification  "
1324,System,EventLog,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:17 PM,6006,None,"The Event log service was stopped.  "
1323,System,WinRM,WARNING,MSEDGEWIN10,12/19/2017 3:47:16 PM,10149,None,"Message text not available. "
1322,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:09 PM,7002,SYSTEM\NT AUTHORITY,"User Logoff Notification for Customer Experience Improvement Program  "
1321,System,User32,INFORMATION,MSEDGEWIN10,12/19/2017 3:47:00 PM,1074,IEUser\MSEDGEWIN10,"The process C:\Windows\System32\RuntimeBroker.exe (MSEDGEWIN10) has initiated the restart of computer MSEDGEWIN10 on behalf of user MSEDGEWIN10\IEUser for the following reason: Other (Unplanned)   Reason Code: 0x0   Shutdown Type: restart   Comment: ?  "
1320,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:46:56 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3Q2-Microsoft.BingWeather  "
1319,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:46:56 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 2017-12 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4054517)  "
1318,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:46:56 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJ3Q2-Microsoft.BingWeather  "
1317,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:46:52 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 100 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.BingWeather_8wekyb3d8bbwe\Settings\settings.dat 2 1  "
1316,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:46:42 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1315,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:46:35 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 132 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BingWeather_4.22.3254.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1314,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:46:33 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH33ZDV-A278AB0D.MarchofEmpires  "
1313,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:46:33 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH33ZDV-A278AB0D.MarchofEmpires  "
1312,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:46:30 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 102 \??\C:\Users\IEUser\AppData\Local\Packages\A278AB0D.MarchofEmpires_h6adky7gbf63m\Settings\settings.dat 1 1  "
1311,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:46:27 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 130 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\A278AB0D.MarchofEmpires_2.9.2.1_x86__h6adky7gbf63m\ActivationStore.dat 0 0  "
1310,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:46:25 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1309,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:46:22 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFHWKN-Microsoft.WindowsSoundRecorder  "
1308,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:46:02 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1307,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:46:02 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFHWKN-Microsoft.WindowsSoundRecorder  "
1306,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:46:02 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3P2-Microsoft.ZuneVideo  "
1305,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:45:59 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 109 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
1304,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:45:54 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 144 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsSoundRecorder_10.1712.3351.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1303,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:45:53 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 98 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
1302,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:45:51 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1301,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:45:51 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJ3P2-Microsoft.ZuneVideo  "
1300,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:45:51 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3PR-Microsoft.WindowsAlarms  "
1299,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:45:46 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 135 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneVideo_10.17112.12111.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1298,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:45:45 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJ3PR-Microsoft.WindowsAlarms  "
1297,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:45:43 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 102 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.dat 6 1  "
1296,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:45:38 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 137 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAlarms_10.1712.3352.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1295,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:45:28 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1294,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:45:28 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVN5-Microsoft.WindowsCalculator  "
1293,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:45:19 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1292,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:45:19 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFHVN5-Microsoft.WindowsCalculator  "
1291,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:45:19 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVJL-Microsoft.Office.OneNote  "
1290,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:45:16 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 106 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
1289,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:45:13 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFHVJL-Microsoft.Office.OneNote  "
1288,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:45:12 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 141 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCalculator_10.1712.3351.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1287,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:45:11 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 103 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
1286,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:45:07 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 139 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Office.OneNote_17.8827.20551.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1285,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:45:05 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1284,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:44:59 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVFW-Microsoft.BingNews  "
1283,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:44:59 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFHVFW-Microsoft.BingNews  "
1282,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:44:56 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 97 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.BingNews_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
1281,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:44:53 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 129 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BingNews_4.22.3254.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1280,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:44:40 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1279,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:44:40 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH1ZRPV-king.com.CandyCrushSodaSaga  "
1278,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:44:40 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH1ZRPV-king.com.CandyCrushSodaSaga  "
1277,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:44:35 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 106 \??\C:\Users\IEUser\AppData\Local\Packages\king.com.CandyCrushSodaSaga_kgqvnymyfvs32\Settings\settings.dat 1 1  "
1276,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:44:34 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1275,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:44:28 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBD8-Microsoft.XboxApp  "
1274,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:44:28 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1273,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:44:28 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJBD8-Microsoft.XboxApp  "
1272,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:44:28 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFHWD2-Microsoft.MicrosoftSolitaireCollection  "
1271,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:44:28 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFHWD2-Microsoft.MicrosoftSolitaireCollection  "
1270,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:44:25 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 96 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\Settings\settings.dat 2 1  "
1269,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:44:22 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 117 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
1268,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:44:22 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH1QWGC-Microsoft.Advertising.Xaml  "
1267,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:44:22 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH1QWGC-Microsoft.Advertising.Xaml  "
1266,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:44:11 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 150 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftSolitaireCollection_3.18.12091.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1265,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:44:10 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 138 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\king.com.CandyCrushSodaSaga_1.104.700.0_x86__kgqvnymyfvs32\ActivationStore.dat 0 0  "
1264,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:44:10 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 130 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxApp_36.36.12003.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1263,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:43:41 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1262,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:43:41 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBH4-Microsoft.Windows.Photos  "
1261,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:43:41 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJBH4-Microsoft.Windows.Photos  "
1260,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:43:32 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NZM7B1BB5TR-Microsoft.NET.Native.Framework.1.7  "
1259,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:43:32 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1258,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:43:32 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NZM7B1BB5TR-Microsoft.NET.Native.Framework.1.7  "
1257,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:43:32 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9MTW6RN84LVM-Microsoft.NET.Native.Runtime.1.7  "
1256,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:43:32 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9MTW6RN84LVM-Microsoft.NET.Native.Runtime.1.7  "
1255,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:43:31 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 137 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1712.5.0_x86__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1254,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:43:29 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 137 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1712.5.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1253,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:43:26 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1252,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:43:24 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NKNC0LD5NN6-Microsoft.Xbox.TCUI  "
1251,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:43:24 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NKNC0LD5NN6-Microsoft.Xbox.TCUI  "
1250,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:43:18 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 98 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Xbox.TCUI_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
1249,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:43:17 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1248,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:43:14 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 131 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Xbox.TCUI_1.11.29001.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1247,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:43:08 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1246,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:43:01 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9P086NHDNB9W-Microsoft.XboxSpeechtoTextOverlay  "
1245,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:43:01 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1244,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:43:01 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9P086NHDNB9W-Microsoft.XboxSpeechtoTextOverlay  "
1243,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:42:59 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 112 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.XboxSpeechToTextOverlay_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
1242,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:42:57 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 145 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxSpeechToTextOverlay_1.21.13002.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1241,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:42:53 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 142 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1240,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:42:49 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1239,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:42:48 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRD29V9-Microsoft.MicrosoftOfficeHub  "
1238,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:42:48 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRD29V9-Microsoft.MicrosoftOfficeHub  "
1237,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:42:39 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 107 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
1236,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:42:38 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 142 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftOfficeHub_17.8830.7600.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1235,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:41:45 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1234,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:41:45 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH42THS-Microsoft.Microsoft3DViewer  "
1233,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:41:37 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH42THS-Microsoft.Microsoft3DViewer  "
1232,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:41:37 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1231,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:41:36 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 106 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
1230,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:41:35 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ2WL-Facebook.Facebook  "
1229,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:41:34 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 141 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Microsoft3DViewer_2.1711.30062.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1228,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:41:24 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJ2WL-Facebook.Facebook  "
1227,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:41:22 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 96 \??\C:\Users\IEUser\AppData\Local\Packages\Facebook.Facebook_8xx8rvfyw5nnt\Settings\settings.dat 3 1  "
1226,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:41:16 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 133 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Facebook.Facebook_140.1268.45465.0_x86__8xx8rvfyw5nnt\ActivationStore.dat 0 0  "
1225,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:57 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1224,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:51 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH5FV99-Microsoft.MSPaint  "
1223,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:51 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1222,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:45 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 96 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
1221,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:44 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH5FV99-Microsoft.MSPaint  "
1220,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:44 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH4QGHW-Microsoft.MicrosoftStickyNotes  "
1219,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:44 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH4QGHW-Microsoft.MicrosoftStickyNotes  "
1218,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:41 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 109 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
1217,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:41 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 130 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MSPaint_3.1712.7027.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1216,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:39 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 137 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftStickyNotes_2.0.5.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1215,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:37 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1214,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:37 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: Definition Update for Windows Defender Antivirus - KB2267602 (Definition 1.259.546.0)  "
1213,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:35 PM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  MpKslc879fa30  Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B6E1C460-E935-4749-AF73-55EE42653C79}\MpKslc879fa30.sys  Service Type:  kernel mode driver  Service Start Type:  system start  Service Account:  ?  "
1212,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:22 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1211,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:22 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ364-Microsoft.SkypeApp  "
1210,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:22 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJ364-Microsoft.SkypeApp  "
1209,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:17 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 97 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat 2 1  "
1208,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:15 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 129 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c\ActivationStore.dat 0 0  "
1207,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:12 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1206,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:08 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH537C2-Microsoft.XboxGameOverlay  "
1205,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:08 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH537C2-Microsoft.XboxGameOverlay  "
1204,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:04 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 104 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
1203,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:40:01 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 136 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGameOverlay_1.24.5001.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1202,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:39:48 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: Definition Update for Windows Defender Antivirus - KB2267602 (Definition 1.259.546.0)  "
1201,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:39:39 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1200,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:39:39 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1199,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:39:39 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1198,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/19/2017 3:39:39 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1197,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:39:24 PM,15,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 41 \??\C:\Windows\System32\config\COMPONENTS 33275904 33169408  "
1196,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:39:21 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 105 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat 2 1  "
1195,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:38:58 PM,15,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 35 \SystemRoot\System32\config\DRIVERS 5251072 5230592  "
1194,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 3:36:23 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1193,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/19/2017 3:36:15 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1192,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:35:57 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 119 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat 296 30  "
1191,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:35:56 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 114 \??\C:\Users\IEUser\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat 54 5  "
1190,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:35:56 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 103 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat 9 3  "
1189,System,Microsoft-Windows-Power-Troubleshooter,INFORMATION,MSEDGEWIN10,12/19/2017 3:35:56 PM,1,LOCAL SERVICE\NT AUTHORITY,"The system has returned from a low power state.    Sleep Time: 2017-12-06T13:30:30.230671300Z  Wake Time: 2017-12-19T23:35:54.904967700Z    Wake Source: 1?  "
1188,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/19/2017 3:35:54 PM,1,None,"Possible detection of CVE: 2017-12-19T23:35:54.500000000Z  Additional Information: 2017-12-06T13:30:36.233190000Z    This Event is generated when an attempt to exploit a known vulnerability (2017-12-19T23:35:54.500000000Z) is detected.  This Event is raised by a User mode process.    "
1187,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/6/2017 5:30:36 AM,107,None,"Message text not available.  Insertion strings: 2 2 2 2434-11-03T20:27:43.750427000Z 2434-11-03T20:27:43.750427000Z 1 1  "
1186,System,EventLog,INFORMATION,MSEDGEWIN10,12/19/2017 3:35:54 PM,6013,None,"The system uptime is 1508925 seconds.  "
1185,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/6/2017 5:30:30 AM,42,None,"Message text not available.  Insertion strings: 2 2 7 0 4  "
1184,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/6/2017 5:27:05 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1183,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/6/2017 5:26:54 AM,1,SYSTEM\NT AUTHORITY,"Possible detection of CVE: 2017-12-06T13:26:54.991000000Z  Additional Information: 2017-12-06T11:23:23.370691100Z    This Event is generated when an attempt to exploit a known vulnerability (2017-12-06T13:26:54.991000000Z) is detected.  This Event is raised by a User mode process.    "
1182,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/6/2017 3:14:00 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name puppet timed out after none of the configured DNS servers responded.  "
1181,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/6/2017 3:07:23 AM,1,LOCAL SERVICE\NT AUTHORITY,"Possible detection of CVE: 2017-12-06T11:07:23.056011300Z  Additional Information: 2017-12-06T11:07:23.056197900Z    This Event is generated when an attempt to exploit a known vulnerability (2017-12-06T11:07:23.056011300Z) is detected.  This Event is raised by a User mode process.    "
1180,System,Microsoft-Windows-Time-Service,INFORMATION,MSEDGEWIN10,12/6/2017 3:07:23 AM,35,LOCAL SERVICE\NT AUTHORITY,"The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->52.178.161.41:123) with reference id 698462772. Current local stratum number is 5.  "
1179,System,Microsoft-Windows-Time-Service,INFORMATION,MSEDGEWIN10,12/6/2017 3:07:08 AM,37,LOCAL SERVICE\NT AUTHORITY,"The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->52.178.161.41:123).  "
1178,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/6/2017 3:01:44 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH33ZDV-A278AB0D.MarchofEmpires  "
1177,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/6/2017 3:01:38 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 102 \??\C:\Users\IEUser\AppData\Local\Packages\A278AB0D.MarchofEmpires_h6adky7gbf63m\Settings\settings.dat 3 1  "
1176,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/6/2017 3:01:38 AM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH33ZDV-A278AB0D.MarchofEmpires  "
1175,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/6/2017 3:01:38 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVQM-microsoft.windowscommunicationsapps  "
1174,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/6/2017 3:01:38 AM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFHVQM-microsoft.windowscommunicationsapps  "
1173,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/6/2017 3:01:36 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 150 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\microsoft.windowscommunicationsapps_17.8730.21155.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1172,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/6/2017 3:01:35 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 131 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\A278AB0D.MarchofEmpires_2.9.0.10_x86__h6adky7gbf63m\ActivationStore.dat 0 0  "
1171,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/6/2017 3:00:40 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBMP-Microsoft.WindowsStore  "
1170,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/6/2017 3:00:40 AM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJBMP-Microsoft.WindowsStore  "
1169,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/6/2017 3:00:34 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 136 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_11711.1001.5.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1168,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/6/2017 3:00:30 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: Definition Update for Windows Defender - KB2267602 (Definition 1.257.1417.0)  "
1167,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/6/2017 3:00:29 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  MpKsl56b44801  Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{AB4BFBB9-8446-4C00-8442-6D05DB7D0407}\MpKsl56b44801.sys  Service Type:  kernel mode driver  Service Start Type:  system start  Service Account:  ?  "
1166,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/6/2017 3:00:24 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1165,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/6/2017 3:00:24 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH4LS1F-Microsoft.StorePurchaseApp  "
1164,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/6/2017 3:00:24 AM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH4LS1F-Microsoft.StorePurchaseApp  "
1163,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/6/2017 3:00:19 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 144 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StorePurchaseApp_11711.1711.20001.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1162,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/6/2017 3:00:11 AM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: Definition Update for Windows Defender - KB2267602 (Definition 1.257.1417.0)  "
1161,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/6/2017 2:59:58 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1160,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/6/2017 2:59:58 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1159,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/6/2017 2:59:51 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1158,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/6/2017 2:59:51 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1157,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/6/2017 2:59:51 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1156,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/6/2017 2:57:05 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1155,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/6/2017 2:56:57 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1154,System,Microsoft-Windows-Power-Troubleshooter,INFORMATION,MSEDGEWIN10,12/6/2017 2:56:37 AM,1,LOCAL SERVICE\NT AUTHORITY,"The system has returned from a low power state.    Sleep Time: 2017-12-04T10:52:37.322013000Z  Wake Time: 2017-12-06T10:56:35.903498300Z    Wake Source: 1?  "
1153,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/6/2017 2:56:35 AM,1,None,"Possible detection of CVE: 2017-12-06T10:56:35.500000000Z  Additional Information: 2017-12-04T10:52:47.871334600Z    This Event is generated when an attempt to exploit a known vulnerability (2017-12-06T10:56:35.500000000Z) is detected.  This Event is raised by a User mode process.    "
1152,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/4/2017 2:52:47 AM,107,None,"Message text not available.  Insertion strings: 2 2 2 2434-11-03T18:24:13.177155500Z 2434-11-03T18:24:13.177155500Z 1 1  "
1151,System,EventLog,INFORMATION,MSEDGEWIN10,12/6/2017 2:56:35 AM,6013,None,"The system uptime is 347578 seconds.  "
1150,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/4/2017 2:52:42 AM,1,None,"Possible detection of CVE: 2017-12-04T10:52:42.500000000Z  Additional Information: 2017-12-04T10:52:37.624144600Z    This Event is generated when an attempt to exploit a known vulnerability (2017-12-04T10:52:42.500000000Z) is detected.  This Event is raised by a User mode process.    "
1149,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/4/2017 2:52:37 AM,42,None,"Message text not available.  Insertion strings: 2 2 7 0 3  "
1148,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/4/2017 2:45:46 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1147,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/4/2017 2:35:37 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1146,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/4/2017 2:26:50 AM,1,LOCAL SERVICE\NT AUTHORITY,"Possible detection of CVE: 2017-12-04T10:26:50.051199000Z  Additional Information: 2017-12-04T10:26:50.051225500Z    This Event is generated when an attempt to exploit a known vulnerability (2017-12-04T10:26:50.051199000Z) is detected.  This Event is raised by a User mode process.    "
1145,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/4/2017 2:26:50 AM,1,LOCAL SERVICE\NT AUTHORITY,"Possible detection of CVE: 2017-12-04T10:26:50.047653400Z  Additional Information: 2017-12-04T10:26:50.047680800Z    This Event is generated when an attempt to exploit a known vulnerability (2017-12-04T10:26:50.047653400Z) is detected.  This Event is raised by a User mode process.    "
1144,System,Microsoft-Windows-Time-Service,INFORMATION,MSEDGEWIN10,12/4/2017 2:26:50 AM,35,LOCAL SERVICE\NT AUTHORITY,"The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->52.178.161.41:123) with reference id 698462772. Current local stratum number is 5.  "
1143,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/4/2017 2:26:50 AM,1,LOCAL SERVICE\NT AUTHORITY,"Possible detection of CVE: 2017-12-04T10:26:50.043517700Z  Additional Information: 2017-12-04T10:26:45.400345200Z    This Event is generated when an attempt to exploit a known vulnerability (2017-12-04T10:26:50.043517700Z) is detected.  This Event is raised by a User mode process.    "
1142,System,Microsoft-Windows-Time-Service,INFORMATION,MSEDGEWIN10,12/4/2017 2:26:30 AM,37,LOCAL SERVICE\NT AUTHORITY,"The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->52.178.161.41:123).  "
1141,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/4/2017 2:15:20 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1140,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/4/2017 2:05:11 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1139,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/4/2017 1:44:54 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1138,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/4/2017 1:34:45 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1137,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/4/2017 1:16:18 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: Definition Update for Windows Defender - KB2267602 (Definition 1.257.1344.0)  "
1136,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/4/2017 1:16:16 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  MpKsl4fc7eda3  Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8E035E86-CFED-4129-8024-ECA7B08B9010}\MpKsl4fc7eda3.sys  Service Type:  kernel mode driver  Service Start Type:  system start  Service Account:  ?  "
1135,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/4/2017 1:16:07 AM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: Definition Update for Windows Defender - KB2267602 (Definition 1.257.1344.0)  "
1134,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/4/2017 1:16:02 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH42THS-Microsoft.Microsoft3DViewer  "
1133,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/4/2017 1:16:02 AM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH42THS-Microsoft.Microsoft3DViewer  "
1132,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/4/2017 1:15:57 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 106 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
1131,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/4/2017 1:15:57 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1130,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/4/2017 1:15:56 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 141 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Microsoft3DViewer_2.1711.17012.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1129,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/4/2017 1:15:43 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1128,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/4/2017 1:12:51 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1127,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/4/2017 1:12:48 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1126,System,Microsoft-Windows-Power-Troubleshooter,INFORMATION,MSEDGEWIN10,12/4/2017 1:12:29 AM,1,LOCAL SERVICE\NT AUTHORITY,"The system has returned from a low power state.    Sleep Time: 2017-12-03T03:20:04.075116200Z  Wake Time: 2017-12-04T09:12:27.858638300Z    Wake Source: 1?  "
1125,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/4/2017 1:12:27 AM,1,None,"Possible detection of CVE: 2017-12-04T09:12:27.500000000Z  Additional Information: 2017-12-03T03:20:10.130606900Z    This Event is generated when an attempt to exploit a known vulnerability (2017-12-04T09:12:27.500000000Z) is detected.  This Event is raised by a User mode process.    "
1124,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/2/2017 7:20:10 PM,107,None,"Message text not available.  Insertion strings: 2 2 2 2434-11-03T18:23:57.456128600Z 2434-11-03T18:23:57.456128600Z 1 1  "
1123,System,EventLog,INFORMATION,MSEDGEWIN10,12/4/2017 1:12:27 AM,6013,None,"The system uptime is 168535 seconds.  "
1122,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/2/2017 7:20:04 PM,42,None,"Message text not available.  Insertion strings: 2 2 7 0 2  "
1121,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/2/2017 7:08:29 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1120,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/2/2017 6:58:20 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1119,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/2/2017 6:38:03 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1118,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/2/2017 6:27:54 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1117,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/2/2017 6:06:00 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1116,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/2/2017 6:05:57 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1115,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/2/2017 6:05:54 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start.  "
1114,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/2/2017 6:04:52 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Remote Access Connection Manager service was changed from demand start to auto start.  "
1113,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/2/2017 6:04:52 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Remote Access IP ARP Driver service was changed from demand start to auto start.  "
1112,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/2/2017 6:04:47 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1111,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/2/2017 6:00:20 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1110,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 5:58:31 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 102 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
1109,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/2/2017 5:46:24 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name puppet timed out after none of the configured DNS servers responded.  "
1108,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/2/2017 5:32:55 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start.  "
1107,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/2/2017 5:30:53 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start.  "
1106,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/2/2017 5:28:17 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1105,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/2/2017 5:28:14 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1104,System,Microsoft-Windows-Power-Troubleshooter,INFORMATION,MSEDGEWIN10,12/2/2017 5:27:55 PM,1,LOCAL SERVICE\NT AUTHORITY,"The system has returned from a low power state.    Sleep Time: 2017-12-02T11:06:12.400922300Z  Wake Time: 2017-12-03T01:27:52.966905400Z    Wake Source: 1?  "
1103,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 5:27:52 PM,1,None,"Possible detection of CVE: 2017-12-03T01:27:52.500000000Z  Additional Information: 2017-12-02T11:06:19.188847400Z    This Event is generated when an attempt to exploit a known vulnerability (2017-12-03T01:27:52.500000000Z) is detected.  This Event is raised by a User mode process.    "
1102,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/2/2017 3:06:19 AM,107,None,"Message text not available.  Insertion strings: 2 2 2 1601-01-01T00:00:00.000000000Z 1601-01-01T00:00:00.000000000Z 0 0  "
1101,System,EventLog,INFORMATION,MSEDGEWIN10,12/2/2017 5:27:52 PM,6013,None,"The system uptime is 54260 seconds.  "
1100,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/2/2017 3:06:12 AM,42,None,"Message text not available.  Insertion strings: 2 2 7 0 1  "
1099,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/2/2017 2:54:37 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name puppet timed out after none of the configured DNS servers responded.  "
1098,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/2/2017 2:45:42 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1097,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:40:06 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 85 \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat 0 0  "
1096,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/2/2017 2:27:27 AM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start.  "
1095,System,WinRM,INFORMATION,MSEDGEWIN10,12/2/2017 2:25:47 AM,10121,None,"Message text not available. "
1094,System,WinRM,INFORMATION,MSEDGEWIN10,12/2/2017 2:25:47 AM,10148,None,"Message text not available. "
1093,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:24:28 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 116 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Windows.HolographicFirstRun_cw5n1h2txyewy\Settings\settings.dat 1 1  "
1092,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/2/2017 2:24:19 AM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start.  "
1091,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/2/2017 2:24:12 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 2017-11 Cumulative Update for Windows 10 Version 1709 for amd64-based Systems (KB4048955)  "
1090,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/2/2017 2:24:03 AM,7040,SYSTEM\NT AUTHORITY,"The start type of the Update Orchestrator Service service was changed from auto start to demand start.  "
1089,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:59 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 104 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat 37 7  "
1088,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:59 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 116 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat 4 1  "
1087,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:57 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 161 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.HolographicFirstRun_10.0.16299.64_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
1086,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/2/2017 2:23:55 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1085,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:52 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 64 \??\C:\Users\IEUser\AppData\Local\Microsoft\Windows\UsrClass.dat 5192 574  "
1084,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:52 AM,7001,SYSTEM\NT AUTHORITY,"User Logon Notification for Customer Experience Improvement Program  "
1083,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:47 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 31 \??\C:\Users\Default\NTUSER.DAT 39 9  "
1082,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:47 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 30 \??\C:\Users\IEUser\NTUSER.DAT 2133 204  "
1081,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/2/2017 2:23:47 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1080,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:46 AM,7026,None,"The following boot-start or system-start driver(s) did not load:   dam  "
1079,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:42 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 45 \??\C:\Windows\AppCompat\Programs\Amcache.hve 772 296  "
1078,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:41 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 69 \??\C:\Users\sshd_server\AppData\Local\Microsoft\Windows\UsrClass.dat 4 1  "
1077,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:41 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 35 \??\C:\Users\sshd_server\ntuser.dat 49 16  "
1076,System,Lfsvc,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:40 AM,1,None,"Geolocation positioning is enabled.  "
1075,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:39 AM,51046,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is started  "
1074,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:39 AM,50103,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client registered for shutdown notification  "
1073,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:39 AM,50036,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is started  "
1072,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:39 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'storqosflt' (10.0, 2005-04-24T01:53:05.000000000Z) has successfully loaded and registered with Filter Manager.  "
1071,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:39 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'CldFlt' (10.0, 2066-03-30T01:16:41.000000000Z) has successfully loaded and registered with Filter Manager.  "
1070,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:39 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'luafv' (10.0, 1971-04-04T06:11:08.000000000Z) has successfully loaded and registered with Filter Manager.  "
1069,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:39 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'wcifs' (10.0, 1973-04-02T03:11:07.000000000Z) has successfully loaded and registered with Filter Manager.  "
1068,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:39 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 54 \??\C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT 122 19  "
1067,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:39 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 31 \SystemRoot\System32\Config\BBI 206 45  "
1066,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:38 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 56 \??\C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT 104 19  "
1065,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:38 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 31 \SystemRoot\System32\Config\SAM 72 7  "
1064,System,Microsoft-Windows-Directory-Services-SAM,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:38 AM,16962,SYSTEM\NT AUTHORITY,"Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).  For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.  "
1063,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:38 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 36 \SystemRoot\System32\Config\SECURITY 91 6  "
1062,System,Microsoft-Windows-Wininit,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:38 AM,14,SYSTEM\NT AUTHORITY,"Credential Guard (LsaIso.exe) configuration: 0, 0  "
1061,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:38 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 35 \SystemRoot\System32\Config\DEFAULT 487 51  "
1060,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:37 AM,15,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 36 \SystemRoot\System32\Config\SOFTWARE 73224192 73109504  "
1059,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:35 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 32 \Device\HarddiskVolume1\Boot\BCD 30 5  "
1058,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:35 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 1 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2201  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
1057,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:35 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 0 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2201  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
1056,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:35 AM,508,None,"Message text not available.  Insertion strings: 2  "
1055,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:35 AM,172,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 2 6  "
1054,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:35 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'npsvctrig' (10.0, 2070-05-05T06:38:28.000000000Z) has successfully loaded and registered with Filter Manager.  "
1053,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:35 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileCrypt' (10.0, 2013-05-08T04:49:03.000000000Z) has successfully loaded and registered with Filter Manager.  "
1052,System,Microsoft-Windows-Ntfs,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:34 AM,98,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: C: \Device\HarddiskVolume1 0  "
1051,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:34 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'WdFilter' (10.0, 2001-08-08T06:54:57.000000000Z) has successfully loaded and registered with Filter Manager.  "
1050,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:34 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'Wof' (10.0, 2102-10-27T15:46:39.000000000Z) has successfully loaded and registered with Filter Manager.  "
1049,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:34 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileInfo' (10.0, 1983-09-10T00:46:43.000000000Z) has successfully loaded and registered with Filter Manager.  "
1048,System,vmci,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:34 AM,3,None,"VMCI: Using capabilities (0xc).   "
1047,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:32 AM,32,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  "
1046,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:32 AM,18,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
1045,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:32 AM,25,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
1044,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:32 AM,27,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  NOEXECUTE=OPTIN  "
1043,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:32 AM,20,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: true true 7 2  "
1042,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:32 AM,153,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0 0 0  "
1041,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:32 AM,12,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 10 0 16299 64 0 0 2017-12-02T10:23:32.489106800Z  "
1040,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:21 AM,13,None,"Message text not available.  Insertion strings: 2017-12-02T10:23:21.580722300Z  "
1039,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:20 AM,109,None,"Message text not available.  Insertion strings: 5 0 5  "
1038,System,EventLog,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:39 AM,6013,None,"The system uptime is 7 seconds.  "
1037,System,EventLog,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:39 AM,6005,None,"The Event log service was started.  "
1036,System,EventLog,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:39 AM,6009,None,"Microsoft (R) Windows (R) 10.00. 16299 ? Multiprocessor Free.  "
1035,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:12 AM,50037,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is stopped. ShutDown Flag value is 1  "
1034,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:12 AM,50106,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 is waiting on DHCPv6 service to stop  "
1033,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:12 AM,51057,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service stop is almost done.DHCP Context Ref count is 1  "
1032,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:12 AM,51057,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service stop is almost done.DHCP Context Ref count is 1  "
1031,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:12 AM,51047,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is stopped. ShutDown Flag value is 1  "
1030,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:12 AM,50105,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT  "
1029,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:12 AM,50104,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client received shutdown notification  "
1028,System,EventLog,INFORMATION,MSEDGEWIN10,12/2/2017 2:23:12 AM,6006,None,"The Event log service was stopped.  "
1027,System,WinRM,WARNING,MSEDGEWIN10,12/2/2017 2:23:12 AM,10149,None,"Message text not available. "
1026,System,Service Control Manager,ERROR,MSEDGEWIN10,12/2/2017 2:23:10 AM,7043,None,"The Delivery Optimization service did not shut down properly after receiving a preshutdown control.  "
1025,System,Service Control Manager,ERROR,MSEDGEWIN10,12/2/2017 2:22:12 AM,7023,None,"The Update Orchestrator Service service terminated with the following error:   %%2147549471  "
1024,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,12/2/2017 2:22:10 AM,7002,SYSTEM\NT AUTHORITY,"User Logoff Notification for Customer Experience Improvement Program  "
1023,System,DCOM,ERROR,MSEDGEWIN10,12/2/2017 2:22:04 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}  "
1022,System,DCOM,ERROR,MSEDGEWIN10,12/2/2017 2:22:03 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: {0002DF02-0000-0000-C000-000000000046}  "
1021,System,DCOM,ERROR,MSEDGEWIN10,12/2/2017 2:22:03 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: {0002DF02-0000-0000-C000-000000000046}  "
1020,System,User32,INFORMATION,MSEDGEWIN10,12/2/2017 2:22:03 AM,1074,SYSTEM\NT AUTHORITY,"The process c:\windows\system32\svchost.exe (MSEDGEWIN10) has initiated the restart of computer MSEDGEWIN10 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned)   Reason Code: 0x80020010   Shutdown Type: restart   Comment: ?  "
1019,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:15:06 AM,1,LOCAL SERVICE\NT AUTHORITY,"Possible detection of CVE: 2017-12-02T10:15:06.523855400Z  Additional Information: 2017-12-02T10:15:06.523901500Z    This Event is generated when an attempt to exploit a known vulnerability (2017-12-02T10:15:06.523855400Z) is detected.  This Event is raised by a User mode process.    "
1018,System,Microsoft-Windows-Time-Service,INFORMATION,MSEDGEWIN10,12/2/2017 2:15:06 AM,35,LOCAL SERVICE\NT AUTHORITY,"The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->52.178.161.41:123) with reference id 698462772. Current local stratum number is 5.  "
1017,System,Microsoft-Windows-Time-Service,INFORMATION,MSEDGEWIN10,12/2/2017 2:14:52 AM,37,LOCAL SERVICE\NT AUTHORITY,"The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->52.178.161.41:123).  "
1016,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/2/2017 2:09:25 AM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start.  "
1015,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/2/2017 2:08:06 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  MpKsl95714cf6  Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{70C3B76E-3F4A-456E-957D-B4193392D252}\MpKsl95714cf6.sys  Service Type:  kernel mode driver  Service Start Type:  system start  Service Account:  ?  "
1014,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/2/2017 2:08:03 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: Definition Update for Windows Defender - KB2267602 (Definition 1.257.1284.0)  "
1013,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/2/2017 2:08:01 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3P2-Microsoft.ZuneVideo  "
1012,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:08:00 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 98 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
1011,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/2/2017 2:07:59 AM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJ3P2-Microsoft.ZuneVideo  "
1010,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:07:58 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 135 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneVideo_10.17102.13911.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
1009,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/2/2017 2:07:47 AM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: Definition Update for Windows Defender - KB2267602 (Definition 1.257.1284.0)  "
1008,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/2/2017 2:07:45 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1007,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,12/2/2017 2:07:40 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
1006,System,Service Control Manager,INFORMATION,MSEDGEWIN10,12/2/2017 2:07:24 AM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start.  "
1005,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/2/2017 2:04:45 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1004,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,12/2/2017 2:04:42 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
1003,System,Microsoft-Windows-Power-Troubleshooter,INFORMATION,MSEDGEWIN10,12/2/2017 2:04:25 AM,1,LOCAL SERVICE\NT AUTHORITY,"The system has returned from a low power state.    Sleep Time: 2017-12-01T00:17:50.975723000Z  Wake Time: 2017-12-02T10:04:23.012064800Z    Wake Source: 1?  "
1002,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,12/2/2017 2:04:22 AM,1,None,"Possible detection of CVE: 2017-12-02T10:04:22.500000000Z  Additional Information: 2017-12-01T00:17:59.303536400Z    This Event is generated when an attempt to exploit a known vulnerability (2017-12-02T10:04:22.500000000Z) is detected.  This Event is raised by a User mode process.    "
1001,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,11/30/2017 4:17:59 PM,107,None,"Message text not available.  Insertion strings: 2 2 2 2017-12-01T01:28:30.016004900Z 2017-12-01T01:28:30.016004900Z 2 2  "
1000,System,EventLog,INFORMATION,MSEDGEWIN10,12/2/2017 2:04:22 AM,6013,None,"The system uptime is 3327109 seconds.  "
999,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 4:17:53 PM,1,None,"Possible detection of CVE: 2017-12-01T00:17:53.500000000Z  Additional Information: 2017-12-01T00:17:51.186160300Z    This Event is generated when an attempt to exploit a known vulnerability (2017-12-01T00:17:53.500000000Z) is detected.  This Event is raised by a User mode process.    "
998,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,11/30/2017 4:17:51 PM,42,None,"Message text not available.  Insertion strings: 2 2 7 0 4  "
997,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,11/30/2017 4:11:00 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
996,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,11/30/2017 4:00:53 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
995,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:59:51 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 39 \SystemRoot\System32\Config\RegBack\SAM 72 7  "
994,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:59:51 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 43 \SystemRoot\System32\Config\RegBack\DEFAULT 485 51  "
993,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:59:51 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 42 \SystemRoot\System32\Config\RegBack\SYSTEM 9838 791  "
992,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:59:50 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 44 \SystemRoot\System32\Config\RegBack\SOFTWARE 181107 13047  "
991,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:59:50 PM,1,LOCAL SERVICE\NT AUTHORITY,"Possible detection of CVE: 2017-11-30T23:59:50.763796200Z  Additional Information: 2017-11-30T23:59:50.763818000Z    This Event is generated when an attempt to exploit a known vulnerability (2017-11-30T23:59:50.763796200Z) is detected.  This Event is raised by a User mode process.    "
990,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:59:50 PM,1,LOCAL SERVICE\NT AUTHORITY,"Possible detection of CVE: 2017-11-30T23:59:50.760869800Z  Additional Information: 2017-11-30T23:59:50.760902800Z    This Event is generated when an attempt to exploit a known vulnerability (2017-11-30T23:59:50.760869800Z) is detected.  This Event is raised by a User mode process.    "
989,System,Microsoft-Windows-Time-Service,INFORMATION,MSEDGEWIN10,11/30/2017 3:59:50 PM,35,LOCAL SERVICE\NT AUTHORITY,"The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.140.65.84:123) with reference id 1413581875. Current local stratum number is 5.  "
988,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:59:50 PM,1,LOCAL SERVICE\NT AUTHORITY,"Possible detection of CVE: 2017-11-30T23:59:50.753945500Z  Additional Information: 2017-11-30T23:59:47.830771000Z    This Event is generated when an attempt to exploit a known vulnerability (2017-11-30T23:59:50.753945500Z) is detected.  This Event is raised by a User mode process.    "
987,System,Microsoft-Windows-Time-Service,INFORMATION,MSEDGEWIN10,11/30/2017 3:59:33 PM,37,LOCAL SERVICE\NT AUTHORITY,"The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.140.65.84:123).  "
986,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:59:23 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 44 \SystemRoot\System32\Config\RegBack\SECURITY 80 5  "
985,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,11/30/2017 3:39:05 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
984,System,Microsoft-Windows-Power-Troubleshooter,INFORMATION,MSEDGEWIN10,11/30/2017 3:38:54 PM,1,LOCAL SERVICE\NT AUTHORITY,"The system has returned from a low power state.    Sleep Time: 2017-11-30T23:27:18.676150100Z  Wake Time: 2017-11-30T23:38:51.920840000Z    Wake Source: 1?  "
983,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:38:51 PM,1,None,"Possible detection of CVE: 2017-11-30T23:38:51.500000000Z  Additional Information: 2017-11-30T23:27:24.931060100Z    This Event is generated when an attempt to exploit a known vulnerability (2017-11-30T23:38:51.500000000Z) is detected.  This Event is raised by a User mode process.    "
982,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,11/30/2017 3:27:24 PM,107,None,"Message text not available.  Insertion strings: 2 2 2 2017-12-01T01:28:30.016233200Z 2017-12-01T01:28:30.016233200Z 2 2  "
981,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,11/30/2017 3:27:19 PM,42,None,"Message text not available.  Insertion strings: 2 2 7 0 3  "
980,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,11/30/2017 3:23:08 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
979,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,11/30/2017 3:12:59 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
978,System,Service Control Manager,INFORMATION,MSEDGEWIN10,11/30/2017 3:08:36 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Update Orchestrator Service service was changed from demand start to auto start.  "
977,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:08:36 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: Windows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2, 2016 x64 Edition - November 2017 (KB890830)  "
976,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:07:35 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: Windows Malicious Software Removal Tool for Windows 8, 8.1, 10 and Windows Server 2012, 2012 R2, 2016 x64 Edition - November 2017 (KB890830)  "
975,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:07:35 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 2017-11 Security Update for Adobe Flash Player for Windows 10 Version 1709 for x64-based Systems (KB4048951)  "
974,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:07:33 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 2017-11 Security Update for Adobe Flash Player for Windows 10 Version 1709 for x64-based Systems (KB4048951)  "
973,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:07:09 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 52 \??\C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT 1 1  "
972,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:06:43 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ364-Microsoft.SkypeApp  "
971,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:06:43 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJ364-Microsoft.SkypeApp  "
970,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:06:39 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 97 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat 2 1  "
969,System,Service Control Manager,INFORMATION,MSEDGEWIN10,11/30/2017 3:06:38 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Windows Modules Installer service was changed from demand start to auto start.  "
968,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:06:37 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 128 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\ActivationStore.dat 0 0  "
967,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:06:17 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 2017-11 Cumulative Update for Windows 10 Version 1709 for amd64-based Systems (KB4048955)  "
966,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:06:12 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRD29V9-Microsoft.MicrosoftOfficeHub  "
965,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:06:12 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRD29V9-Microsoft.MicrosoftOfficeHub  "
964,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:06:12 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBQ6-Microsoft.Messaging  "
963,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:06:07 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 107 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
962,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:06:05 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJBQ6-Microsoft.Messaging  "
961,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:06:04 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 98 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Messaging_8wekyb3d8bbwe\Settings\settings.dat 2 1  "
960,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:06:00 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 142 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftOfficeHub_17.8809.7600.0_x86__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
959,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:05:36 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
958,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:05:36 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH5PNB1-Microsoft.OneConnect  "
957,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:05:19 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH5PNB1-Microsoft.OneConnect  "
956,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:05:17 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 99 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.OneConnect_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
955,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:05:10 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 133 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.OneConnect_3.1710.3044.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
954,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:05:09 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 131 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Messaging_3.34.25004.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
953,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:04:51 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
952,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:04:51 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH2JHXJ-Microsoft.MinecraftUWP  "
951,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:04:51 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH2JHXJ-Microsoft.MinecraftUWP  "
950,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:04:41 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 101 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MinecraftUWP_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
949,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:04:36 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
948,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:04:36 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 131 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MinecraftUWP_1.2.552.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
947,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:04:33 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFHWD2-Microsoft.MicrosoftSolitaireCollection  "
946,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:04:18 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 117 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
945,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:04:16 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFHWD2-Microsoft.MicrosoftSolitaireCollection  "
944,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:04:16 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH1QWGC-Microsoft.Advertising.Xaml  "
943,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:04:13 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
942,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:04:13 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH1QWGC-Microsoft.Advertising.Xaml  "
941,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:04:13 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3PT-Microsoft.ZuneMusic  "
940,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:04:07 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJ3PT-Microsoft.ZuneMusic  "
939,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:04:05 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 98 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
938,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:03:39 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 135 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneMusic_10.17085.22311.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
937,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:03:14 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 150 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftSolitaireCollection_3.18.11201.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
936,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:02:52 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
935,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:02:52 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVJL-Microsoft.Office.OneNote  "
934,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:02:52 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFHVJL-Microsoft.Office.OneNote  "
933,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:02:43 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 103 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
932,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:02:40 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 139 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Office.OneNote_17.8730.20741.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
931,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:02:14 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
930,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:01:43 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 137 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1711.2.0_x86__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
929,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:01:13 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 137 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1711.2.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
928,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:00:58 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
927,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:00:58 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
926,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:00:58 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH1ZRPV-king.com.CandyCrushSodaSaga  "
925,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:00:48 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH1ZRPV-king.com.CandyCrushSodaSaga  "
924,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:00:48 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH51CLL-Microsoft.Services.Store.Engagement  "
923,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:00:48 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH5FV99-Microsoft.MSPaint  "
922,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:00:42 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 106 \??\C:\Users\IEUser\AppData\Local\Packages\king.com.CandyCrushSodaSaga_kgqvnymyfvs32\Settings\settings.dat 3 1  "
921,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:00:39 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH5FV99-Microsoft.MSPaint  "
920,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:00:38 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 96 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
919,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 3:00:31 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 131 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MSPaint_3.1710.30027.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
918,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:00:21 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
917,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:00:21 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
916,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:00:14 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
915,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 3:00:07 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBD8-Microsoft.XboxApp  "
914,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:59:56 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJBD8-Microsoft.XboxApp  "
913,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:59:54 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 96 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\Settings\settings.dat 2 1  "
912,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:59:40 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
911,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:59:40 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVQM-microsoft.windowscommunicationsapps  "
910,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:59:34 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFHVQM-microsoft.windowscommunicationsapps  "
909,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:59:24 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 150 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\microsoft.windowscommunicationsapps_17.8700.40675.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
908,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:58:45 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 138 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\king.com.CandyCrushSodaSaga_1.101.900.0_x86__kgqvnymyfvs32\ActivationStore.dat 0 0  "
907,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:58:14 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 130 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxApp_34.35.13001.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
906,System,Service Control Manager,INFORMATION,MSEDGEWIN10,11/30/2017 2:58:11 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start.  "
905,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:58:07 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
904,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:58:05 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH4NNS1-Microsoft.DesktopAppInstaller  "
903,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:57:57 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH4NNS1-Microsoft.DesktopAppInstaller  "
902,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:57:54 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 108 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
901,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:57:52 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 140 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.DesktopAppInstaller_1.0.12894.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
900,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:57:45 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 41 \??\C:\Windows\System32\config\COMPONENTS 63519 7287  "
899,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:57:41 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
898,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:57:41 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBH4-Microsoft.Windows.Photos  "
897,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:57:35 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJBH4-Microsoft.Windows.Photos  "
896,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:57:32 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 103 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat 14 3  "
895,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:57:29 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 142 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Photos_2017.39091.16340.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
894,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:57:02 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
893,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:57:02 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3PR-Microsoft.WindowsAlarms  "
892,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:56:53 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJ3PR-Microsoft.WindowsAlarms  "
891,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:56:48 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 137 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAlarms_10.1711.3041.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
890,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:56:32 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
889,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:56:32 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
888,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:56:32 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
887,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:56:32 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: Definition Update for Windows Defender - KB2267602 (Definition 1.257.1202.0)  "
886,System,Service Control Manager,INFORMATION,MSEDGEWIN10,11/30/2017 2:56:25 PM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  MpKsl7a5828b5  Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{16DDD0D6-1411-4AB5-99CE-56CCB1DE4386}\MpKsl7a5828b5.sys  Service Type:  kernel mode driver  Service Start Type:  system start  Service Account:  ?  "
885,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:56:16 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
884,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:56:16 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH4LS1F-Microsoft.StorePurchaseApp  "
883,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:56:16 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
882,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:56:11 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 105 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
881,System,Service Control Manager,INFORMATION,MSEDGEWIN10,11/30/2017 2:56:10 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start.  "
880,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:56:10 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH4LS1F-Microsoft.StorePurchaseApp  "
879,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:56:10 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBMP-Microsoft.WindowsStore  "
878,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:56:10 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJBMP-Microsoft.WindowsStore  "
877,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:56:08 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 101 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat 10 1  "
876,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:56:07 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 137 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_11710.1001.27.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
875,System,Service Control Manager,INFORMATION,MSEDGEWIN10,11/30/2017 2:56:00 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start.  "
874,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:57 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 144 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StorePurchaseApp_11710.1710.30001.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
873,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:43 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
872,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:43 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH537C2-Microsoft.XboxGameOverlay  "
871,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:43 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
870,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:43 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH537C2-Microsoft.XboxGameOverlay  "
869,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:43 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH10PG8-Microsoft.People  "
868,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:40 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 104 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
867,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:37 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH10PG8-Microsoft.People  "
866,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:37 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH51CLL-Microsoft.Services.Store.Engagement  "
865,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:37 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH51CLL-Microsoft.Services.Store.Engagement  "
864,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:37 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 95 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.People_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
863,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:32 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 137 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGameOverlay_1.22.30001.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
862,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:29 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 147 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.17112.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
861,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:27 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 147 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.17112.0_x86__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
860,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:25 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
859,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:25 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBBG-Microsoft.WindowsCamera  "
858,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:25 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
857,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:22 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJBBG-Microsoft.WindowsCamera  "
856,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:22 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NKNC0LD5NN6-Microsoft.Xbox.TCUI  "
855,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:22 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
854,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:20 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 102 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.WindowsCamera_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
853,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:17 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NKNC0LD5NN6-Microsoft.Xbox.TCUI  "
852,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:16 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 127 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.People_10.2.2791.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
851,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:16 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 98 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Xbox.TCUI_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
850,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:15 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 136 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCamera_2017.921.10.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
849,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:09 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 130 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Xbox.TCUI_1.10.3002.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
848,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:55:02 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: Definition Update for Windows Defender - KB2267602 (Definition 1.257.1202.0)  "
847,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:54:53 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
846,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:54:53 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
845,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:54:53 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
844,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,11/30/2017 2:54:53 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
843,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:53:57 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 35 \SystemRoot\System32\config\DRIVERS 534 65  "
842,System,Service Control Manager,INFORMATION,MSEDGEWIN10,11/30/2017 2:53:51 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start.  "
841,System,Service Control Manager,INFORMATION,MSEDGEWIN10,11/30/2017 2:53:11 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start.  "
840,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:52:20 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 96 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.LockApp_cw5n1h2txyewy\Settings\settings.dat 3 1  "
839,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,11/30/2017 2:51:13 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
838,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,11/30/2017 2:51:05 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
837,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:50:54 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 114 \??\C:\Users\IEUser\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat 54 5  "
836,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:50:54 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 102 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.dat 6 1  "
835,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:50:54 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 119 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat 251 28  "
834,System,Service Control Manager,INFORMATION,MSEDGEWIN10,11/30/2017 2:50:52 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start.  "
833,System,Microsoft-Windows-Power-Troubleshooter,INFORMATION,MSEDGEWIN10,11/30/2017 2:50:52 PM,1,LOCAL SERVICE\NT AUTHORITY,"The system has returned from a low power state.    Sleep Time: 2017-10-27T00:12:25.006908800Z  Wake Time: 2017-11-30T22:50:49.891935400Z    Wake Source: 1?  "
832,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:50:49 PM,1,None,"Possible detection of CVE: 2017-11-30T22:50:49.779815200Z  Additional Information: 2017-11-30T22:50:49.779815200Z    This Event is generated when an attempt to exploit a known vulnerability (2017-11-30T22:50:49.779815200Z) is detected.  This Event is raised by a User mode process.    "
831,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,11/30/2017 2:50:49 PM,1,None,"Possible detection of CVE: 2017-11-30T22:50:49.500000000Z  Additional Information: 2017-10-27T00:12:31.374877700Z    This Event is generated when an attempt to exploit a known vulnerability (2017-11-30T22:50:49.500000000Z) is detected.  This Event is raised by a User mode process.    "
830,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/26/2017 4:12:31 PM,107,None,"Message text not available.  Insertion strings: 2 2 2 1601-01-01T00:00:00.000000000Z 1601-01-01T00:00:00.000000000Z 0 0  "
829,System,EventLog,INFORMATION,MSEDGEWIN10,11/30/2017 2:50:49 PM,6013,None,"The system uptime is 3200299 seconds.  "
828,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/26/2017 4:12:25 PM,42,None,"Message text not available.  Insertion strings: 2 2 7 0 2  "
827,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/26/2017 4:07:56 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
826,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/26/2017 3:57:47 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
825,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/26/2017 3:41:12 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 117 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\Settings\settings.dat 3 1  "
824,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/26/2017 3:37:30 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
823,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/26/2017 3:27:21 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
822,System,DCOM,ERROR,MSEDGEWIN10,10/26/2017 3:19:43 PM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: Microsoft.MicrosoftEdge_41.16299.15.0_neutral__8wekyb3d8bbwe!ContentProcess  "
821,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/26/2017 3:07:04 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
820,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/26/2017 2:56:55 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
819,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/26/2017 2:36:38 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
818,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:34:59 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH1ZRPV-king.com.CandyCrushSodaSaga  "
817,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:34:59 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH1ZRPV-king.com.CandyCrushSodaSaga  "
816,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/26/2017 2:34:53 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 138 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\king.com.CandyCrushSodaSaga_1.100.600.0_x86__kgqvnymyfvs32\ActivationStore.dat 0 0  "
815,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:32:48 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ2WL-Facebook.Facebook  "
814,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:32:48 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJ2WL-Facebook.Facebook  "
813,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/26/2017 2:32:43 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 133 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Facebook.Facebook_140.1135.47783.0_x86__8xx8rvfyw5nnt\ActivationStore.dat 0 0  "
812,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:31:24 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVFW-Microsoft.BingNews  "
811,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:31:24 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFHVFW-Microsoft.BingNews  "
810,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:31:19 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH1QWGC-Microsoft.Advertising.Xaml  "
809,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:31:19 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH1QWGC-Microsoft.Advertising.Xaml  "
808,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/26/2017 2:31:17 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 137 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1709.1.0_x86__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
807,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/26/2017 2:31:11 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 137 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1709.1.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
806,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:30:59 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
805,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/26/2017 2:30:51 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 129 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BingNews_4.21.2212.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
804,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:29:57 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
803,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:29:43 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH2JHXJ-Microsoft.MinecraftUWP  "
802,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:29:43 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH2JHXJ-Microsoft.MinecraftUWP  "
801,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:29:43 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH51CLL-Microsoft.Services.Store.Engagement  "
800,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/26/2017 2:29:38 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 131 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MinecraftUWP_1.2.306.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
799,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:29:18 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
798,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:29:18 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH33ZDV-A278AB0D.MarchofEmpires  "
797,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:29:09 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH33ZDV-A278AB0D.MarchofEmpires  "
796,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:29:09 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ9RM-Microsoft.VCLibs.120.00  "
795,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:29:09 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJ9RM-Microsoft.VCLibs.120.00  "
794,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/26/2017 2:29:07 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 131 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\A278AB0D.MarchofEmpires_2.8.0.10_x86__h6adky7gbf63m\ActivationStore.dat 0 0  "
793,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:27:42 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
792,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:27:42 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ140-9E2F88E3.Twitter  "
791,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:27:32 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJ140-9E2F88E3.Twitter  "
790,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:27:32 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH51CLL-Microsoft.Services.Store.Engagement  "
789,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:27:32 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH51CLL-Microsoft.Services.Store.Engagement  "
788,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/26/2017 2:27:30 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 123 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\9E2F88E3.Twitter_5.8.1.0_x86__wgeqdkkx372wm\ActivationStore.dat 0 0  "
787,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:27:13 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
786,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:27:13 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
785,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:27:13 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
784,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/26/2017 2:27:10 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 146 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
783,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/26/2017 2:27:08 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 146 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
782,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:27:04 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
781,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:27:04 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
780,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/26/2017 2:26:29 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
779,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/26/2017 2:19:58 PM,1,LOCAL SERVICE\NT AUTHORITY,"Possible detection of CVE: 2017-10-26T22:19:58.031935900Z  Additional Information: 2017-10-26T22:19:58.032024300Z    This Event is generated when an attempt to exploit a known vulnerability (2017-10-26T22:19:58.031935900Z) is detected.  This Event is raised by a User mode process.    "
778,System,Microsoft-Windows-Time-Service,INFORMATION,MSEDGEWIN10,10/26/2017 2:19:58 PM,35,LOCAL SERVICE\NT AUTHORITY,"The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->52.166.120.77:123) with reference id 1299752500. Current local stratum number is 3.  "
777,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/26/2017 2:19:51 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Windows Modules Installer service was changed from auto start to demand start.  "
776,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/26/2017 2:19:51 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Windows Modules Installer service was changed from demand start to auto start.  "
775,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/26/2017 2:19:46 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Windows Modules Installer service was changed from auto start to demand start.  "
774,System,Microsoft-Windows-Time-Service,INFORMATION,MSEDGEWIN10,10/26/2017 2:19:43 PM,37,LOCAL SERVICE\NT AUTHORITY,"The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->52.166.120.77:123).  "
773,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/26/2017 2:19:41 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Windows Modules Installer service was changed from demand start to auto start.  "
772,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/26/2017 2:09:12 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start.  "
771,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/26/2017 2:08:10 PM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  MpKsl3d752714  Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{730D03F0-9823-451A-B42A-4C3DE5576632}\MpKsl3d752714.sys  Service Type:  kernel mode driver  Service Start Type:  system start  Service Account:  ?  "
770,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:08:07 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBMP-Microsoft.WindowsStore  "
769,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:08:07 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJBMP-Microsoft.WindowsStore  "
768,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:08:07 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH5FV99-Microsoft.MSPaint  "
767,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/26/2017 2:08:03 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 137 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_11709.1001.27.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
766,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:08:02 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH5FV99-Microsoft.MSPaint  "
765,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:08:02 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: Definition Update for Windows Defender - KB2267602 (Definition 1.255.118.0)  "
764,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/26/2017 2:08:00 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 131 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MSPaint_3.1710.18037.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
763,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:07:51 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRDTBJJ-Microsoft.Getstarted  "
762,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:07:48 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
761,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:07:48 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRDTBJJ-Microsoft.Getstarted  "
760,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:07:48 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH4LS1F-Microsoft.StorePurchaseApp  "
759,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:07:48 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
758,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:07:48 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH4LS1F-Microsoft.StorePurchaseApp  "
757,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/26/2017 2:07:44 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 105 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
756,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:07:43 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH537C2-Microsoft.XboxGameOverlay  "
755,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:07:43 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH537C2-Microsoft.XboxGameOverlay  "
754,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/26/2017 2:07:42 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 104 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
753,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/26/2017 2:07:41 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 130 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Getstarted_6.5.2851.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
752,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/26/2017 2:07:40 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 144 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StorePurchaseApp_11709.1710.17001.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
751,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/26/2017 2:07:40 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 137 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGameOverlay_1.22.10001.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
750,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:07:36 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: Definition Update for Windows Defender - KB2267602 (Definition 1.255.118.0)  "
749,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:07:32 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
748,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:07:27 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
747,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:07:27 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
746,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/26/2017 2:07:27 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
745,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/26/2017 2:07:11 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start.  "
744,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/26/2017 2:04:36 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
743,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/26/2017 2:04:33 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
742,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/26/2017 2:04:16 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 96 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.LockApp_cw5n1h2txyewy\Settings\settings.dat 3 1  "
741,System,Microsoft-Windows-Power-Troubleshooter,INFORMATION,MSEDGEWIN10,10/26/2017 2:04:14 PM,1,LOCAL SERVICE\NT AUTHORITY,"The system has returned from a low power state.    Sleep Time: 2017-10-24T22:58:57.563603100Z  Wake Time: 2017-10-26T22:04:11.919313000Z    Wake Source: 1?  "
740,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/26/2017 2:04:11 PM,1,None,"Possible detection of CVE: 2017-10-26T22:04:11.500000000Z  Additional Information: 2017-10-24T22:59:05.250569800Z    This Event is generated when an attempt to exploit a known vulnerability (2017-10-26T22:04:11.500000000Z) is detected.  This Event is raised by a User mode process.    "
739,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/24/2017 2:59:05 PM,107,None,"Message text not available.  Insertion strings: 2 2 2 1601-01-01T00:00:00.000000000Z 1601-01-01T00:00:00.000000000Z 0 0  "
738,System,EventLog,INFORMATION,MSEDGEWIN10,10/26/2017 2:04:11 PM,6013,None,"The system uptime is 173501 seconds.  "
737,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 2:58:59 PM,1,None,"Possible detection of CVE: 2017-10-24T22:58:59.500000000Z  Additional Information: 2017-10-24T22:58:57.877237800Z    This Event is generated when an attempt to exploit a known vulnerability (2017-10-24T22:58:59.500000000Z) is detected.  This Event is raised by a User mode process.    "
736,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/24/2017 2:58:57 PM,42,None,"Message text not available.  Insertion strings: 2 2 7 0 1  "
735,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/24/2017 2:54:05 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
734,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/24/2017 2:43:56 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
733,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 2:25:32 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 102 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
732,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 2:25:30 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 114 \??\C:\Users\IEUser\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat 53 4  "
731,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/24/2017 2:23:39 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
730,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/24/2017 2:22:50 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Windows Modules Installer service was changed from auto start to demand start.  "
729,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/24/2017 2:13:30 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
728,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 2:04:41 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 35 \SystemRoot\System32\config\DRIVERS 130 23  "
727,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 2:04:39 PM,1,LOCAL SERVICE\NT AUTHORITY,"Possible detection of CVE: 2017-10-24T22:04:39.994141300Z  Additional Information: 2017-10-24T22:04:39.994165900Z    This Event is generated when an attempt to exploit a known vulnerability (2017-10-24T22:04:39.994141300Z) is detected.  This Event is raised by a User mode process.    "
726,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 2:04:39 PM,1,LOCAL SERVICE\NT AUTHORITY,"Possible detection of CVE: 2017-10-24T22:04:39.993065600Z  Additional Information: 2017-10-24T22:04:39.993108400Z    This Event is generated when an attempt to exploit a known vulnerability (2017-10-24T22:04:39.993065600Z) is detected.  This Event is raised by a User mode process.    "
725,System,Microsoft-Windows-Time-Service,INFORMATION,MSEDGEWIN10,10/24/2017 2:04:39 PM,35,LOCAL SERVICE\NT AUTHORITY,"The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->52.178.161.41:123) with reference id 698462772. Current local stratum number is 5.  "
724,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 2:04:39 PM,1,LOCAL SERVICE\NT AUTHORITY,"Possible detection of CVE: 2017-10-24T22:04:39.991349500Z  Additional Information: 2017-10-25T06:03:22.593377500Z    This Event is generated when an attempt to exploit a known vulnerability (2017-10-24T22:04:39.991349500Z) is detected.  This Event is raised by a User mode process.    "
723,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:03:14 PM,15,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 52 \??\C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT 12152832 11681792  "
722,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:03:11 PM,15,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 41 \??\C:\Windows\System32\config\COMPONENTS 31834112 31830016  "
721,System,Microsoft-Windows-Time-Service,INFORMATION,MSEDGEWIN10,10/24/2017 10:03:09 PM,37,LOCAL SERVICE\NT AUTHORITY,"The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->52.178.161.41:123).  "
720,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/24/2017 10:03:06 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Windows Modules Installer service was changed from demand start to auto start.  "
719,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:03:03 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 85 \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat 0 0  "
718,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:02:31 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVN5-Microsoft.WindowsCalculator  "
717,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:02:26 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 106 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
716,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:02:25 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFHVN5-Microsoft.WindowsCalculator  "
715,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:02:25 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBH4-Microsoft.Windows.Photos  "
714,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:02:25 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJBH4-Microsoft.Windows.Photos  "
713,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:02:23 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 141 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCalculator_10.1710.2791.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
712,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:02:23 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 142 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Photos_2017.39081.15820.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
711,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:02:22 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVJL-Microsoft.Office.OneNote  "
710,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:02:22 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFHVJL-Microsoft.Office.OneNote  "
709,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:02:18 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 103 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
708,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:02:16 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 139 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Office.OneNote_17.8625.20901.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
707,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:02:16 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
706,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:02:16 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ364-Microsoft.SkypeApp  "
705,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:02:16 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJ364-Microsoft.SkypeApp  "
704,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:02:11 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 129 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\ActivationStore.dat 0 0  "
703,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:46 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
702,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:46 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFHWKN-Microsoft.WindowsSoundRecorder  "
701,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:46 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFHWKN-Microsoft.WindowsSoundRecorder  "
700,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:42 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 109 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
699,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:41 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 144 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsSoundRecorder_10.1710.2861.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
698,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:39 PM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  MpKsl936cc2d6  Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{33E4778C-0199-4CE1-A60E-43C4D4388269}\MpKsl936cc2d6.sys  Service Type:  kernel mode driver  Service Start Type:  system start  Service Account:  ?  "
697,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:35 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
696,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:33 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3PR-Microsoft.WindowsAlarms  "
695,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:33 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
694,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:25 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start.  "
693,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:24 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 102 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.dat 7 1  "
692,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:24 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJ3PR-Microsoft.WindowsAlarms  "
691,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:24 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH4R32N-Microsoft.WindowsFeedbackHub  "
690,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:24 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH4R32N-Microsoft.WindowsFeedbackHub  "
689,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:23 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 137 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAlarms_10.1710.2841.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
688,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:23 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 107 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
687,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:22 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 141 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsFeedbackHub_1.1708.2831.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
686,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:13 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
685,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:13 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3P2-Microsoft.ZuneVideo  "
684,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:13 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJ3P2-Microsoft.ZuneVideo  "
683,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:10 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 98 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\settings.dat 1 1  "
682,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:09 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 135 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneVideo_10.17092.13511.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
681,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:02 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
680,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:02 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH5FV99-Microsoft.MSPaint  "
679,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:01:02 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH5FV99-Microsoft.MSPaint  "
678,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:59 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 96 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MSPaint_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
677,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:58 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
676,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:58 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBBG-Microsoft.WindowsCamera  "
675,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:58 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
674,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:55 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 130 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MSPaint_3.1710.4027.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
673,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:53 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 102 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.WindowsCamera_8wekyb3d8bbwe\Settings\settings.dat 2 1  "
672,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:52 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJBBG-Microsoft.WindowsCamera  "
671,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:52 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRDTBVB-Microsoft.WindowsMaps  "
670,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:52 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRDTBVB-Microsoft.WindowsMaps  "
669,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:51 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 100 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.WindowsMaps_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
668,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:49 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 134 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsMaps_5.1708.2764.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
667,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:48 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 136 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCamera_2017.727.40.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
666,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:46 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
665,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:46 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVQM-microsoft.windowscommunicationsapps  "
664,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:41 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFHVQM-microsoft.windowscommunicationsapps  "
663,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:40 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 150 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\microsoft.windowscommunicationsapps_17.8600.40525.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
662,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:37 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
661,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:37 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBMP-Microsoft.WindowsStore  "
660,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:37 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJBMP-Microsoft.WindowsStore  "
659,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:31 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 137 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_11708.1001.30.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
658,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:25 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
657,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:25 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3PT-Microsoft.ZuneMusic  "
656,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:25 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJ3PT-Microsoft.ZuneMusic  "
655,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:21 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 98 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
654,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:20 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 135 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneMusic_10.17083.18321.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
653,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:08 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
652,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:08 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBD8-Microsoft.XboxApp  "
651,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:08 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJBD8-Microsoft.XboxApp  "
650,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:04 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 96 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\Settings\settings.dat 2 1  "
649,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:03 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
648,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:03 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 130 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxApp_33.33.15001.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
647,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:01 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH42THS-Microsoft.Microsoft3DViewer  "
646,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:01 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH42THS-Microsoft.Microsoft3DViewer  "
645,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:01 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH4RV3K-Microsoft.VCLibs.140.00.UWPDesktop  "
644,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 10:00:01 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH4RV3K-Microsoft.VCLibs.140.00.UWPDesktop  "
643,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:59:56 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 106 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
642,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 9:59:54 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
641,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 9:59:50 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
640,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 9:59:50 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
639,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/24/2017 9:59:36 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start.  "
638,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:59:27 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 103 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat 7 1  "
637,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 9:57:29 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: Definition Update for Windows Defender - KB2267602 (Definition 1.255.29.0)  "
636,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 9:56:59 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: Definition Update for Windows Defender - KB2267602 (Definition 1.255.29.0)  "
635,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 9:56:53 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
634,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/24/2017 9:56:17 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start.  "
633,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:55:54 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 139 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Office.OneNote_17.8568.57631.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
632,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:55:42 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 140 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Microsoft3DViewer_2.1709.8012.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
631,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:55:30 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 102 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Settings\settings.dat 2 1  "
630,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,10/24/2017 9:55:17 PM,7001,SYSTEM\NT AUTHORITY,"User Logon Notification for Customer Experience Improvement Program  "
629,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 9:55:13 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
628,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 9:55:13 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
627,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:55:09 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 130 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MSPaint_3.1710.4027.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
626,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,10/24/2017 9:55:08 PM,7002,SYSTEM\NT AUTHORITY,"User Logoff Notification for Customer Experience Improvement Program  "
625,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 9:55:07 PM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRDTBJJ-Microsoft.Getstarted  "
624,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 9:54:30 PM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRDTBJJ-Microsoft.Getstarted  "
623,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:54:29 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 99 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Getstarted_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
622,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:54:23 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 130 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Getstarted_6.2.2356.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
621,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 9:54:10 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
620,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 9:54:10 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
619,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/24/2017 9:54:10 PM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
618,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:54:09 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 101 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat 2 1  "
617,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:54:07 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 114 \??\C:\Users\IEUser\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat 54 3  "
616,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:54:06 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 97 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat 2 1  "
615,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:54:05 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 119 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat 281 26  "
614,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:53:58 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 104 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat 83 9  "
613,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:53:58 PM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 116 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat 5 1  "
612,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:53:56 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 64 \??\C:\Users\IEUser\AppData\Local\Microsoft\Windows\UsrClass.dat 5168 519  "
611,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:53:56 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 30 \??\C:\Users\IEUser\ntuser.dat 2767 184  "
610,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,10/24/2017 9:53:56 PM,7001,SYSTEM\NT AUTHORITY,"User Logon Notification for Customer Experience Improvement Program  "
609,System,WinRM,INFORMATION,MSEDGEWIN10,10/24/2017 9:53:24 PM,10121,None,"Message text not available. "
608,System,WinRM,INFORMATION,MSEDGEWIN10,10/24/2017 9:53:24 PM,10148,None,"Message text not available. "
607,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/24/2017 9:53:07 PM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start.  "
606,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/24/2017 9:51:44 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
605,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/24/2017 9:51:36 PM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
604,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:30 PM,7026,None,"The following boot-start or system-start driver(s) did not load:   dam  "
603,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:25 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 45 \??\C:\Windows\AppCompat\Programs\Amcache.hve 175 81  "
602,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:23 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 69 \??\C:\Users\sshd_server\AppData\Local\Microsoft\Windows\UsrClass.dat 6 1  "
601,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:23 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 35 \??\C:\Users\sshd_server\ntuser.dat 639 37  "
600,System,Lfsvc,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:22 PM,1,None,"Geolocation positioning is enabled.  "
599,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:21 PM,6,SYSTEM\NT AUTHORITY,"File System Filter 'storqosflt' (10.0, 2005-04-24T02:53:05.000000000Z) has successfully loaded and registered with Filter Manager.  "
598,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:21 PM,6,SYSTEM\NT AUTHORITY,"File System Filter 'CldFlt' (10.0, 2066-03-30T02:16:41.000000000Z) has successfully loaded and registered with Filter Manager.  "
597,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:21 PM,51046,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is started  "
596,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:21 PM,6,SYSTEM\NT AUTHORITY,"File System Filter 'luafv' (10.0, 1988-05-28T19:42:46.000000000Z) has successfully loaded and registered with Filter Manager.  "
595,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:21 PM,50103,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client registered for shutdown notification  "
594,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:21 PM,50036,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is started  "
593,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:21 PM,6,SYSTEM\NT AUTHORITY,"File System Filter 'wcifs' (10.0, 2014-12-24T18:01:46.000000000Z) has successfully loaded and registered with Filter Manager.  "
592,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:21 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 54 \??\C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT 690 38  "
591,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:21 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 31 \SystemRoot\System32\Config\BBI 211 46  "
590,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:21 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 56 \??\C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT 679 37  "
589,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:20 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 31 \SystemRoot\System32\Config\SAM 84 7  "
588,System,Microsoft-Windows-Directory-Services-SAM,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:20 PM,16962,SYSTEM\NT AUTHORITY,"Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).  For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.  "
587,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:20 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 36 \SystemRoot\System32\Config\SECURITY 115 5  "
586,System,Microsoft-Windows-Wininit,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:20 PM,14,SYSTEM\NT AUTHORITY,"Credential Guard (LsaIso.exe) configuration: 0, 0  "
585,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:20 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 35 \SystemRoot\System32\Config\DEFAULT 333 39  "
584,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:19 PM,15,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 36 \SystemRoot\System32\Config\SOFTWARE 68980736 69066752  "
583,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:16 PM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 32 \Device\HarddiskVolume1\Boot\BCD 77 5  "
582,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:16 PM,15,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 35 \SystemRoot\System32\config\DRIVERS 5140480 5226496  "
581,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:16 PM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 1 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2201  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
580,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:16 PM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 0 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2201  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
579,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:16 PM,508,None,"Message text not available.  Insertion strings: 2  "
578,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:16 PM,172,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 2 6  "
577,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:16 PM,6,SYSTEM\NT AUTHORITY,"File System Filter 'npsvctrig' (10.0, 2070-05-05T07:38:28.000000000Z) has successfully loaded and registered with Filter Manager.  "
576,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:15 PM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileCrypt' (10.0, 2013-05-08T05:49:03.000000000Z) has successfully loaded and registered with Filter Manager.  "
575,System,Microsoft-Windows-Ntfs,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:15 PM,98,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: C: \Device\HarddiskVolume1 0  "
574,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:15 PM,6,SYSTEM\NT AUTHORITY,"File System Filter 'WdFilter' (10.0, 2001-08-08T07:54:57.000000000Z) has successfully loaded and registered with Filter Manager.  "
573,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:15 PM,6,SYSTEM\NT AUTHORITY,"File System Filter 'Wof' (10.0, 2102-10-27T16:46:39.000000000Z) has successfully loaded and registered with Filter Manager.  "
572,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:15 PM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileInfo' (10.0, 1983-09-10T01:46:43.000000000Z) has successfully loaded and registered with Filter Manager.  "
571,System,vmci,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:15 PM,3,None,"VMCI: Using capabilities (0xc).   "
570,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:12 PM,32,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  "
569,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:12 PM,18,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
568,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:12 PM,25,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
567,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:12 PM,27,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  NOEXECUTE=OPTIN  "
566,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:12 PM,20,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: true true 6 2  "
565,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:12 PM,153,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0 0 0  "
564,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:12 PM,12,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 10 0 16299 19 0 0 2017-10-25T05:51:12.496415800Z  "
563,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:37 AM,13,None,"Message text not available.  Insertion strings: 2017-10-17T19:26:37.195260600Z  "
562,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:36 AM,109,None,"Message text not available.  Insertion strings: 4 0 5  "
561,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:32 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
560,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:32 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH4LS1F-Microsoft.StorePurchaseApp  "
559,System,EventLog,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:21 PM,6013,None,"The system uptime is 8 seconds.  "
558,System,EventLog,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:21 PM,6005,None,"The Event log service was started.  "
557,System,EventLog,INFORMATION,MSEDGEWIN10,10/24/2017 9:51:21 PM,6009,None,"Microsoft (R) Windows (R) 10.00. 16299 ? Multiprocessor Free.  "
556,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:32 AM,50037,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is stopped. ShutDown Flag value is 1  "
555,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:32 AM,50106,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 is waiting on DHCPv6 service to stop  "
554,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:32 AM,51057,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service stop is almost done.DHCP Context Ref count is 1  "
553,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:32 AM,51057,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service stop is almost done.DHCP Context Ref count is 1  "
552,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:32 AM,51047,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is stopped. ShutDown Flag value is 1  "
551,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:32 AM,50105,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT  "
550,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:32 AM,50104,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client received shutdown notification  "
549,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:31 AM,7002,SYSTEM\NT AUTHORITY,"User Logoff Notification for Customer Experience Improvement Program  "
548,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:32 AM,6006,None,"The Event log service was stopped.  "
547,System,WinRM,WARNING,MSEDGEWIN10,10/17/2017 11:26:32 AM,10149,None,"Message text not available. "
546,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:29 AM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH4LS1F-Microsoft.StorePurchaseApp  "
545,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:29 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
544,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:29 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9PBPCH085S3S-Microsoft.Print3D  "
543,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:28 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 105 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
542,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:26 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 144 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StorePurchaseApp_11707.1707.25006.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
541,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:24 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
540,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:24 AM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9PBPCH085S3S-Microsoft.Print3D  "
539,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:24 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH5PNB1-Microsoft.OneConnect  "
538,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:24 AM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH5PNB1-Microsoft.OneConnect  "
537,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:23 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 96 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Print3D_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
536,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:22 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
535,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:22 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NKNC0LD5NN6-Microsoft.Xbox.TCUI  "
534,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:22 AM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NKNC0LD5NN6-Microsoft.Xbox.TCUI  "
533,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:22 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 99 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.OneConnect_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
532,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:21 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 127 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Print3D_1.0.2572.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
531,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:19 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 98 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Xbox.TCUI_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
530,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:18 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 133 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.OneConnect_3.1708.2372.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
529,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:18 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 130 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Xbox.TCUI_1.9.11001.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
528,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:13 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
527,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:13 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9PKDZBMV1H3T-Microsoft.GetHelp  "
526,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:13 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
525,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:13 AM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9PKDZBMV1H3T-Microsoft.GetHelp  "
524,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:09 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 98 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Messaging_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
523,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:09 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 96 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
522,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:08 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH3FRZM-Microsoft.VCLibs.140.00  "
521,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:08 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3P2-Microsoft.ZuneVideo  "
520,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:08 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
519,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:08 AM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9WZDNCRFJ3P2-Microsoft.ZuneVideo  "
518,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:08 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH3FRZM-Microsoft.VCLibs.140.00  "
517,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:08 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 9NBLGGH537C2-Microsoft.XboxGameOverlay  "
516,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:07 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 98 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
515,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:04 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 104 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.XboxGameOverlay_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
514,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:03 AM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH537C2-Microsoft.XboxGameOverlay  "
513,System,Microsoft-Windows-WindowsUpdateClient,ERROR,MSEDGEWIN10,10/17/2017 11:26:03 AM,20,SYSTEM\NT AUTHORITY,"Installation Failure: Windows failed to install the following update with error 0x80070070: 9NBLGGH3FRZM-Microsoft.VCLibs.140.00.  "
512,System,User32,INFORMATION,MSEDGEWIN10,10/17/2017 11:26:00 AM,1074,IEUser\MSEDGEWIN10,"The process C:\Windows\system32\shutdown.exe (MSEDGEWIN10) has initiated the shutdown of computer MSEDGEWIN10 on behalf of user MSEDGEWIN10\IEUser for the following reason: Application: Maintenance (Planned)   Reason Code: 0x80040001   Shutdown Type: shutdown   Comment: ?  "
511,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:25:09 AM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 9NBLGGH3FRZM-Microsoft.VCLibs.140.00  "
510,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 11:21:48 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
509,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/17/2017 11:19:08 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
508,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 11:18:21 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 131 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.GetHelp_10.1706.1981.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
507,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 11:18:20 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 137 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGameOverlay_1.21.11001.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
506,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 11:18:20 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 135 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneVideo_10.17082.14121.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
505,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 11:00:00 AM,6013,None,"The system uptime is 1996 seconds.  "
504,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/17/2017 10:58:54 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
503,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 10:54:17 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
502,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 10:54:16 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
501,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 10:54:13 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
500,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/17/2017 10:48:47 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
499,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:47:16 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 97 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat 3 1  "
498,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 10:42:00 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
497,System,Lfsvc,INFORMATION,MSEDGEWIN10,10/17/2017 10:36:52 AM,1,None,"Geolocation positioning is enabled.  "
496,System,Lfsvc,INFORMATION,MSEDGEWIN10,10/17/2017 10:36:52 AM,1,None,"Geolocation positioning is enabled.  "
495,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:32:21 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 102 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
494,System,WinRM,INFORMATION,MSEDGEWIN10,10/17/2017 10:31:44 AM,10121,None,"Message text not available. "
493,System,WinRM,INFORMATION,MSEDGEWIN10,10/17/2017 10:31:44 AM,10148,None,"Message text not available. "
492,System,Service Control Manager,ERROR,MSEDGEWIN10,10/17/2017 10:31:09 AM,7022,None,"The Windows Remote Management (WS-Management) service hung on starting.  "
491,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:58 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  VMware Snapshot Provider  Service File Name:  C:\Windows\system32\dllhost.exe /Processid:{10A91BF3-D6B2-4B07-94D9-B83CAFB6FDF4}  Service Type:  user mode service  Service Start Type:  demand start  Service Account:  NT AUTHORITY\LocalService  "
490,System,Service Control Manager,ERROR,MSEDGEWIN10,10/17/2017 10:27:55 AM,7023,None,"The Interactive Services Detection service terminated with the following error:   %%1  "
489,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:55 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  VMware Tools  Service File Name:  "C:\Program Files\VMware\VMware Tools\vmtoolsd.exe"  Service Type:  user mode service  Service Start Type:  auto start  Service Account:  LocalSystem  "
488,System,Microsoft-Windows-UserPnp,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:54 AM,20001,SYSTEM\NT AUTHORITY,"Driver Management concluded the process to install driver vm3d.inf_amd64_509449bb136edd07\vm3d.inf for Device Instance ID PCI\VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00\3&61AAA01&0&78 with the following status: 0x0.  "
487,System,Microsoft-Windows-UserPnp,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:54 AM,20003,SYSTEM\NT AUTHORITY,"Driver Management has concluded the process to add Service vm3dmp for Device Instance ID PCI\VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00\3&61AAA01&0&78 with the following status: 0.  "
486,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:54 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  vm3dmp  Service File Name:  \SystemRoot\system32\DRIVERS\vm3dmp.sys  Service Type:  kernel mode driver  Service Start Type:  demand start  Service Account:  ?  "
485,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:52 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  VMware Physical Disk Helper  Service File Name:  \SystemRoot\system32\DRIVERS\vmrawdsk.sys  Service Type:  kernel mode driver  Service Start Type:  system start  Service Account:  ?  "
484,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:52 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  VMware Host Guest Client Redirector  Service File Name:  system32\DRIVERS\vmhgfs.sys  Service Type:  kernel mode driver  Service Start Type:  demand start  Service Account:  ?  "
483,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:50 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  Memory Control Driver  Service File Name:  \SystemRoot\system32\DRIVERS\vmmemctl.sys  Service Type:  kernel mode driver  Service Start Type:  auto start  Service Account:  ?  "
482,System,Microsoft-Windows-UserPnp,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:50 AM,20001,SYSTEM\NT AUTHORITY,"Driver Management concluded the process to install driver vmmouse.inf_amd64_31990a165ac530d5\vmmouse.inf for Device Instance ID ACPI\VMW0003\4&1BD7F811&0 with the following status: 0x0.  "
481,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:50 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  VMware Pointing Device  Service File Name:  \SystemRoot\System32\drivers\vmmouse.sys  Service Type:  kernel mode driver  Service Start Type:  demand start  Service Account:  ?  "
480,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:44 AM,7040,SYSTEM\NT AUTHORITY,"The start type of the Windows Socket 2.0 Non-IFS Service Provider Support Environment service was changed from disabled to system start.  "
479,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:44 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  vSockets Virtual Machine Communication Interface Sockets driver  Service File Name:  \SystemRoot\system32\DRIVERS\vsock.sys  Service Type:  kernel mode driver  Service Start Type:  system start  Service Account:  ?  "
478,System,Microsoft-Windows-UserPnp,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:44 AM,20001,SYSTEM\NT AUTHORITY,"Driver Management concluded the process to install driver vmci.inf_amd64_64189b30c198ca23\vmci.inf for Device Instance ID ROOT\VMWVMCIHOSTDEV\0000 with the following status: 0x0.  "
477,System,Microsoft-Windows-UserPnp,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:44 AM,20001,SYSTEM\NT AUTHORITY,"Driver Management concluded the process to install driver vmci.inf_amd64_64189b30c198ca23\vmci.inf for Device Instance ID PCI\VEN_15AD&DEV_0740&SUBSYS_074015AD&REV_10\3&61AAA01&0&3F with the following status: 0x0.  "
476,System,vmci,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:44 AM,3,None,"VMCI: Using capabilities (0xc).   "
475,System,Microsoft-Windows-UserPnp,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:43 AM,20001,SYSTEM\NT AUTHORITY,"Driver Management concluded the process to install driver vmci.inf_amd64_64189b30c198ca23\vmci.inf for Device Instance ID PCI\VEN_15AD&DEV_0740&SUBSYS_074015AD&REV_10\3&61AAA01&0&3F with the following status: 0x0.  "
474,System,vmci,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:43 AM,3,None,"VMCI: Using capabilities (0xc).   "
473,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:43 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  VMware VMCI Bus Driver  Service File Name:  System32\drivers\vmci.sys  Service Type:  kernel mode driver  Service Start Type:  boot start  Service Account:  ?  "
472,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:42 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  VMware CAF Management Agent Service  Service File Name:  "C:\Program Files\VMware\VMware Tools\VMware CAF\pme\bin\ManagementAgentHost.exe"  Service Type:  user mode service  Service Start Type:  auto start  Service Account:  LocalSystem  "
471,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:42 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  VMware CAF AMQP Communication Service  Service File Name:  "C:\Program Files\VMware\VMware Tools\VMware CAF\pme\bin\CommAmqpListener.exe"  Service Type:  user mode service  Service Start Type:  demand start  Service Account:  LocalSystem  "
470,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:42 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  VMware Alias Manager and Ticket Service  Service File Name:  "C:\Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe"  Service Type:  user mode service  Service Start Type:  auto start  Service Account:  LocalSystem  "
469,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:42 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  VMware Physical Disk Helper Service  Service File Name:  "C:\Program Files\VMware\VMware Tools\vmacthlp.exe"  Service Type:  user mode service  Service Start Type:  auto start  Service Account:  LocalSystem  "
468,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:42 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  TP VC Gateway Service  Service File Name:  "C:\Program Files\VMware\VMware Tools\TPVCGateway.exe"  Service Type:  user mode service  Service Start Type:  auto start  Service Account:  LocalSystem  "
467,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:27:42 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  TP AutoConnect Service  Service File Name:  "C:\Program Files\VMware\VMware Tools\TPAutoConnSvc.exe"  Service Type:  user mode service  Service Start Type:  auto start  Service Account:  LocalSystem  "
466,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/17/2017 10:26:55 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
465,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:52 AM,7026,None,"The following boot-start or system-start driver(s) did not load:   dam  "
464,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:51 AM,7001,SYSTEM\NT AUTHORITY,"User Logon Notification for Customer Experience Improvement Program  "
463,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:48 AM,51046,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is started  "
462,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:48 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'storqosflt' (10.0, 2005-04-24T02:53:05.000000000Z) has successfully loaded and registered with Filter Manager.  "
461,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:48 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'CldFlt' (10.0, 2066-03-30T02:16:41.000000000Z) has successfully loaded and registered with Filter Manager.  "
460,System,Service Control Manager,ERROR,MSEDGEWIN10,10/17/2017 10:26:48 AM,7000,None,"The luafv service failed to start due to the following error:   %%1275  "
459,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:48 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'wcifs' (10.0, 2014-12-24T18:01:46.000000000Z) has successfully loaded and registered with Filter Manager.  "
458,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:48 AM,50103,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client registered for shutdown notification  "
457,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:48 AM,50036,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is started  "
456,System,Microsoft-Windows-Directory-Services-SAM,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:47 AM,16962,SYSTEM\NT AUTHORITY,"Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).  For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.  "
455,System,Microsoft-Windows-Wininit,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:47 AM,14,SYSTEM\NT AUTHORITY,"Credential Guard (LsaIso.exe) configuration: 0, 0  "
454,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:46 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 1 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2667  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
453,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:46 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 0 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2667  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
452,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:45 AM,508,None,"Message text not available.  Insertion strings: 2  "
451,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:45 AM,172,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 2 6  "
450,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:45 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'npsvctrig' (10.0, 2070-05-05T07:38:28.000000000Z) has successfully loaded and registered with Filter Manager.  "
449,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:45 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileCrypt' (10.0, 2013-05-08T05:49:03.000000000Z) has successfully loaded and registered with Filter Manager.  "
448,System,Microsoft-Windows-Ntfs,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:45 AM,98,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: C: \Device\HarddiskVolume1 0  "
447,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:45 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'WdFilter' (10.0, 2001-08-08T07:54:57.000000000Z) has successfully loaded and registered with Filter Manager.  "
446,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:45 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'Wof' (10.0, 2102-10-27T16:46:39.000000000Z) has successfully loaded and registered with Filter Manager.  "
445,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:45 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileInfo' (10.0, 1983-09-10T01:46:43.000000000Z) has successfully loaded and registered with Filter Manager.  "
444,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:43 AM,32,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  "
443,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:43 AM,18,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
442,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:43 AM,25,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
441,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:43 AM,27,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  NOEXECUTE=OPTIN  "
440,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:43 AM,20,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: true true 5 2  "
439,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:43 AM,153,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0 0 0  "
438,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:43 AM,12,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 10 0 16299 19 0 0 2017-10-17T18:26:43.486473300Z  "
437,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:33 AM,13,None,"Message text not available.  Insertion strings: 2017-10-17T18:26:33.505535700Z  "
436,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:33 AM,109,None,"Message text not available.  Insertion strings: 5 0 5  "
435,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:31 AM,50037,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is stopped. ShutDown Flag value is 1  "
434,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:31 AM,50106,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 is waiting on DHCPv6 service to stop  "
433,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:48 AM,6013,None,"The system uptime is 4 seconds.  "
432,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:48 AM,6005,None,"The Event log service was started.  "
431,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:48 AM,6009,None,"Microsoft (R) Windows (R) 10.00. 16299 ? Multiprocessor Free.  "
430,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:31 AM,51057,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service stop is almost done.DHCP Context Ref count is 1  "
429,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:31 AM,51057,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service stop is almost done.DHCP Context Ref count is 1  "
428,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:31 AM,51047,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is stopped. ShutDown Flag value is 1  "
427,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:31 AM,50105,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT  "
426,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:31 AM,50104,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client received shutdown notification  "
425,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:31 AM,7002,SYSTEM\NT AUTHORITY,"User Logoff Notification for Customer Experience Improvement Program  "
424,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:31 AM,6006,None,"The Event log service was stopped.  "
423,System,DCOM,ERROR,MSEDGEWIN10,10/17/2017 10:26:30 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}  "
422,System,User32,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:28 AM,1074,IEUser\MSEDGEWIN10,"The process C:\Windows\system32\wbem\wmiprvse.exe (MSEDGEWIN10) has initiated the restart of computer MSEDGEWIN10 on behalf of user MSEDGEWIN10\IEUser for the following reason: No title for this reason could be found   Reason Code: 0x80070015   Shutdown Type: restart   Comment: ?  "
421,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:26:17 AM,7045,IEUser\MSEDGEWIN10,"A service was installed in the system.    Service Name:  OpenSSH Server  Service File Name:  C:\Program Files\OpenSSH\bin\cygrunsrv.exe  Service Type:  user mode service  Service Start Type:  auto start  Service Account:  MSEDGEWIN10\sshd_server  "
420,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/17/2017 10:25:55 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
419,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:51 AM,7026,None,"The following boot-start or system-start driver(s) did not load:   dam  "
418,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:50 AM,7001,SYSTEM\NT AUTHORITY,"User Logon Notification for Customer Experience Improvement Program  "
417,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:48 AM,51046,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is started  "
416,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:48 AM,50103,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client registered for shutdown notification  "
415,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:48 AM,50036,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is started  "
414,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:48 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'storqosflt' (10.0, 2005-04-24T02:53:05.000000000Z) has successfully loaded and registered with Filter Manager.  "
413,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:48 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'CldFlt' (10.0, 2066-03-30T02:16:41.000000000Z) has successfully loaded and registered with Filter Manager.  "
412,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:48 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'wcifs' (10.0, 2014-12-24T18:01:46.000000000Z) has successfully loaded and registered with Filter Manager.  "
411,System,Service Control Manager,ERROR,MSEDGEWIN10,10/17/2017 10:25:48 AM,7000,None,"The luafv service failed to start due to the following error:   %%1275  "
410,System,Microsoft-Windows-Directory-Services-SAM,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:47 AM,16962,SYSTEM\NT AUTHORITY,"Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).  For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.  "
409,System,Microsoft-Windows-Wininit,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:47 AM,14,SYSTEM\NT AUTHORITY,"Credential Guard (LsaIso.exe) configuration: 0, 0  "
408,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:46 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 1 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2667  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
407,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:46 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 0 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2667  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
406,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:45 AM,172,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 2 6  "
405,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:45 AM,508,None,"Message text not available.  Insertion strings: 2  "
404,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:45 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'npsvctrig' (10.0, 2070-05-05T07:38:28.000000000Z) has successfully loaded and registered with Filter Manager.  "
403,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:45 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileCrypt' (10.0, 2013-05-08T05:49:03.000000000Z) has successfully loaded and registered with Filter Manager.  "
402,System,Microsoft-Windows-Ntfs,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:45 AM,98,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: C: \Device\HarddiskVolume1 0  "
401,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:45 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'WdFilter' (10.0, 2001-08-08T07:54:57.000000000Z) has successfully loaded and registered with Filter Manager.  "
400,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:45 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'Wof' (10.0, 2102-10-27T16:46:39.000000000Z) has successfully loaded and registered with Filter Manager.  "
399,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:45 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileInfo' (10.0, 1983-09-10T01:46:43.000000000Z) has successfully loaded and registered with Filter Manager.  "
398,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:43 AM,32,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  "
397,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:43 AM,18,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
396,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:43 AM,25,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
395,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:43 AM,27,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  NOEXECUTE=OPTIN  "
394,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:43 AM,20,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: true true 4 2  "
393,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:43 AM,153,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0 0 0  "
392,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:43 AM,12,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 10 0 16299 19 0 0 2017-10-17T18:25:43.487042000Z  "
391,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:32 AM,13,None,"Message text not available.  Insertion strings: 2017-10-17T18:25:32.972928400Z  "
390,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:32 AM,109,None,"Message text not available.  Insertion strings: 5 0 5  "
389,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:30 AM,50037,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is stopped. ShutDown Flag value is 1  "
388,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:30 AM,51057,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service stop is almost done.DHCP Context Ref count is 1  "
387,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:30 AM,51057,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service stop is almost done.DHCP Context Ref count is 1  "
386,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:30 AM,51047,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is stopped. ShutDown Flag value is 1  "
385,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:48 AM,6013,None,"The system uptime is 4 seconds.  "
384,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:48 AM,6005,None,"The Event log service was started.  "
383,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:48 AM,6009,None,"Microsoft (R) Windows (R) 10.00. 16299 ? Multiprocessor Free.  "
382,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:30 AM,50106,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 is waiting on DHCPv6 service to stop  "
381,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:30 AM,50105,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT  "
380,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:30 AM,50104,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client received shutdown notification  "
379,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:30 AM,7002,SYSTEM\NT AUTHORITY,"User Logoff Notification for Customer Experience Improvement Program  "
378,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:30 AM,6006,None,"The Event log service was stopped.  "
377,System,WinRM,WARNING,MSEDGEWIN10,10/17/2017 10:25:30 AM,10149,None,"Message text not available. "
376,System,User32,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:28 AM,1074,IEUser\MSEDGEWIN10,"The process C:\Windows\system32\wbem\wmiprvse.exe (MSEDGEWIN10) has initiated the restart of computer MSEDGEWIN10 on behalf of user MSEDGEWIN10\IEUser for the following reason: No title for this reason could be found   Reason Code: 0x80070015   Shutdown Type: restart   Comment: ?  "
375,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:25:21 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  Puppet Agent  Service File Name:  "C:\Program Files\Puppet Labs\Puppet\sys\ruby\bin\ruby.exe" -rubygems "C:\Program Files\Puppet Labs\Puppet\service\daemon.rb"  Service Type:  user mode service  Service Start Type:  auto start  Service Account:  MSEDGEWIN10\LocalSystem  "
374,System,WinRM,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:35 AM,10121,None,"Message text not available. "
373,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:33 AM,7040,IEUser\MSEDGEWIN10,"The start type of the Windows Remote Management (WS-Management) service was changed from demand start to auto start.  "
372,System,WinRM,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:33 AM,10148,None,"Message text not available. "
371,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/17/2017 10:24:28 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
370,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:23 AM,7001,SYSTEM\NT AUTHORITY,"User Logon Notification for Customer Experience Improvement Program  "
369,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:22 AM,7026,None,"The following boot-start or system-start driver(s) did not load:   dam  "
368,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:21 AM,51046,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is started  "
367,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:21 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'storqosflt' (10.0, 2005-04-24T02:53:05.000000000Z) has successfully loaded and registered with Filter Manager.  "
366,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:21 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'CldFlt' (10.0, 2066-03-30T02:16:41.000000000Z) has successfully loaded and registered with Filter Manager.  "
365,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:21 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'wcifs' (10.0, 2014-12-24T18:01:46.000000000Z) has successfully loaded and registered with Filter Manager.  "
364,System,Service Control Manager,ERROR,MSEDGEWIN10,10/17/2017 10:24:21 AM,7000,None,"The luafv service failed to start due to the following error:   %%1275  "
363,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:21 AM,50103,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client registered for shutdown notification  "
362,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:21 AM,50036,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is started  "
361,System,Microsoft-Windows-Directory-Services-SAM,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:20 AM,16962,SYSTEM\NT AUTHORITY,"Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).  For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.  "
360,System,Microsoft-Windows-Wininit,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:20 AM,14,SYSTEM\NT AUTHORITY,"Credential Guard (LsaIso.exe) configuration: 0, 0  "
359,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:19 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 1 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2667  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
358,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:19 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 0 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2667  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
357,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:18 AM,508,None,"Message text not available.  Insertion strings: 2  "
356,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:18 AM,172,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 2 6  "
355,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:18 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'npsvctrig' (10.0, 2070-05-05T07:38:28.000000000Z) has successfully loaded and registered with Filter Manager.  "
354,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:18 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileCrypt' (10.0, 2013-05-08T05:49:03.000000000Z) has successfully loaded and registered with Filter Manager.  "
353,System,Microsoft-Windows-Ntfs,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:18 AM,98,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: C: \Device\HarddiskVolume1 0  "
352,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:18 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'WdFilter' (10.0, 2001-08-08T07:54:57.000000000Z) has successfully loaded and registered with Filter Manager.  "
351,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:18 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'Wof' (10.0, 2102-10-27T16:46:39.000000000Z) has successfully loaded and registered with Filter Manager.  "
350,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:18 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileInfo' (10.0, 1983-09-10T01:46:43.000000000Z) has successfully loaded and registered with Filter Manager.  "
349,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:16 AM,32,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  "
348,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:16 AM,18,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
347,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:16 AM,25,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
346,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:16 AM,27,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  NOEXECUTE=OPTIN  "
345,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:16 AM,20,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: true true 3 2  "
344,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:16 AM,153,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0 0 0  "
343,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:16 AM,12,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 10 0 16299 19 0 0 2017-10-17T18:24:16.486650700Z  "
342,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:05 AM,13,None,"Message text not available.  Insertion strings: 2017-10-17T18:24:05.944235500Z  "
341,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:05 AM,109,None,"Message text not available.  Insertion strings: 5 0 5  "
340,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:05 AM,50037,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is stopped. ShutDown Flag value is 1  "
339,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:05 AM,50106,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 is waiting on DHCPv6 service to stop  "
338,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:21 AM,6013,None,"The system uptime is 4 seconds.  "
337,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:21 AM,6005,None,"The Event log service was started.  "
336,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:21 AM,6009,None,"Microsoft (R) Windows (R) 10.00. 16299 ? Multiprocessor Free.  "
335,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:05 AM,51057,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service stop is almost done.DHCP Context Ref count is 1  "
334,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:05 AM,51057,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service stop is almost done.DHCP Context Ref count is 1  "
333,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:05 AM,51047,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is stopped. ShutDown Flag value is 1  "
332,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:05 AM,50105,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT  "
331,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:05 AM,50104,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client received shutdown notification  "
330,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:05 AM,6006,None,"The Event log service was stopped.  "
329,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:04 AM,7002,SYSTEM\NT AUTHORITY,"User Logoff Notification for Customer Experience Improvement Program  "
328,System,User32,INFORMATION,MSEDGEWIN10,10/17/2017 10:24:04 AM,1074,IEUser\MSEDGEWIN10,"The process C:\Windows\system32\wbem\wmiprvse.exe (MSEDGEWIN10) has initiated the restart of computer MSEDGEWIN10 on behalf of user MSEDGEWIN10\IEUser for the following reason: No title for this reason could be found   Reason Code: 0x80070015   Shutdown Type: restart   Comment: ?  "
327,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:23:49 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 116 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Windows.HolographicFirstRun_cw5n1h2txyewy\Settings\settings.dat 3 1  "
326,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 10:23:45 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 2017-10 Cumulative Update for Windows 10 Version 1709 for amd64-based Systems (KB4043961)  "
325,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:23:14 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 161 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.HolographicFirstRun_10.0.16299.19_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
324,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/17/2017 10:23:10 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
323,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,10/17/2017 10:23:10 AM,7001,SYSTEM\NT AUTHORITY,"User Logon Notification for Customer Experience Improvement Program  "
322,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:23:05 AM,7026,None,"The following boot-start or system-start driver(s) did not load:   dam  "
321,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:23:02 AM,51046,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is started  "
320,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:23:02 AM,50103,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client registered for shutdown notification  "
319,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:23:02 AM,50036,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is started  "
318,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:23:02 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'storqosflt' (10.0, 2005-04-24T02:53:05.000000000Z) has successfully loaded and registered with Filter Manager.  "
317,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:23:02 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'CldFlt' (10.0, 2066-03-30T02:16:41.000000000Z) has successfully loaded and registered with Filter Manager.  "
316,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:23:02 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'wcifs' (10.0, 2014-12-24T18:01:46.000000000Z) has successfully loaded and registered with Filter Manager.  "
315,System,Service Control Manager,ERROR,MSEDGEWIN10,10/17/2017 10:23:02 AM,7000,None,"The luafv service failed to start due to the following error:   %%1275  "
314,System,Microsoft-Windows-Directory-Services-SAM,INFORMATION,MSEDGEWIN10,10/17/2017 10:23:01 AM,16962,SYSTEM\NT AUTHORITY,"Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).  For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.  "
313,System,Microsoft-Windows-Wininit,INFORMATION,MSEDGEWIN10,10/17/2017 10:23:01 AM,14,SYSTEM\NT AUTHORITY,"Credential Guard (LsaIso.exe) configuration: 0, 0  "
312,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:23:00 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 1 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2667  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
311,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:23:00 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 0 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2667  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
310,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:23:00 AM,508,None,"Message text not available.  Insertion strings: 2  "
309,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:23:00 AM,172,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 2 6  "
308,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:59 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'npsvctrig' (10.0, 2070-05-05T07:38:28.000000000Z) has successfully loaded and registered with Filter Manager.  "
307,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:59 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileCrypt' (10.0, 2013-05-08T05:49:03.000000000Z) has successfully loaded and registered with Filter Manager.  "
306,System,Microsoft-Windows-Ntfs,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:59 AM,98,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: C: \Device\HarddiskVolume1 0  "
305,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:59 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'WdFilter' (10.0, 2001-08-08T07:54:57.000000000Z) has successfully loaded and registered with Filter Manager.  "
304,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:59 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'Wof' (10.0, 2102-10-27T16:46:39.000000000Z) has successfully loaded and registered with Filter Manager.  "
303,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:59 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileInfo' (10.0, 1983-09-10T01:46:43.000000000Z) has successfully loaded and registered with Filter Manager.  "
302,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:57 AM,32,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  "
301,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:57 AM,18,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
300,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:57 AM,25,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
299,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:57 AM,27,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  NOEXECUTE=OPTIN  "
298,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:57 AM,20,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: true true 2 2  "
297,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:57 AM,153,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0 0 0  "
296,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:57 AM,12,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 10 0 16299 19 0 0 2017-10-17T18:22:57.486619600Z  "
295,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:46 AM,13,None,"Message text not available.  Insertion strings: 2017-10-17T18:22:46.653781900Z  "
294,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:46 AM,109,None,"Message text not available.  Insertion strings: 5 0 5  "
293,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:23:02 AM,6013,None,"The system uptime is 5 seconds.  "
292,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:23:02 AM,6005,None,"The Event log service was started.  "
291,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:23:02 AM,6009,None,"Microsoft (R) Windows (R) 10.00. 16299 ? Multiprocessor Free.  "
290,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:41 AM,50037,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is stopped. ShutDown Flag value is 1  "
289,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:41 AM,50106,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 is waiting on DHCPv6 service to stop  "
288,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:41 AM,51057,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service stop is almost done.DHCP Context Ref count is 1  "
287,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:41 AM,51057,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service stop is almost done.DHCP Context Ref count is 1  "
286,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:41 AM,51047,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is stopped. ShutDown Flag value is 1  "
285,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:41 AM,50105,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT  "
284,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:41 AM,50104,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client received shutdown notification  "
283,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:41 AM,6006,None,"The Event log service was stopped.  "
282,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:04 AM,7002,SYSTEM\NT AUTHORITY,"User Logoff Notification for Customer Experience Improvement Program  "
281,System,User32,INFORMATION,MSEDGEWIN10,10/17/2017 10:22:03 AM,1074,IEUser\MSEDGEWIN10,"The process C:\Windows\system32\wbem\wmiprvse.exe (MSEDGEWIN10) has initiated the restart of computer MSEDGEWIN10 on behalf of user MSEDGEWIN10\IEUser for the following reason: No title for this reason could be found   Reason Code: 0x80070015   Shutdown Type: restart   Comment: ?  "
280,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:21:14 AM,7040,SYSTEM\NT AUTHORITY,"The start type of the Windows Modules Installer service was changed from demand start to auto start.  "
279,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 10:21:03 AM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 2017-10 Cumulative Update for Windows 10 Version 1709 for amd64-based Systems (KB4043961)  "
278,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 10:21:03 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: Definition Update for Windows Defender - KB2267602 (Definition 1.253.879.0)  "
277,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 10:20:33 AM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: Definition Update for Windows Defender - KB2267602 (Definition 1.253.879.0)  "
276,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 10:20:28 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: 2017-10 Security Update for Adobe Flash Player for Windows 10 Version 1709 for x64-based Systems (KB4049179)  "
275,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 10:20:28 AM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: 2017-10 Security Update for Adobe Flash Player for Windows 10 Version 1709 for x64-based Systems (KB4049179)  "
274,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 10:20:28 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: Windows Malicious Software Removal Tool for Windows Insider Preview and Server Technical Preview x64 - October 2017 (KB890830)  "
273,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:20:27 AM,7040,SYSTEM\NT AUTHORITY,"The start type of the Windows Modules Installer service was changed from auto start to demand start.  "
272,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:20:25 AM,7040,SYSTEM\NT AUTHORITY,"The start type of the Windows Modules Installer service was changed from demand start to auto start.  "
271,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:20:21 AM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start.  "
270,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 10:19:26 AM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: Windows Malicious Software Removal Tool for Windows Insider Preview and Server Technical Preview x64 - October 2017 (KB890830)  "
269,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 10:19:26 AM,19,SYSTEM\NT AUTHORITY,"Installation Successful: Windows successfully installed the following update: Microsoft Silverlight (KB4023307)  "
268,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 10:18:30 AM,43,SYSTEM\NT AUTHORITY,"Installation Started: Windows has started installing the following update: Microsoft Silverlight (KB4023307)  "
267,System,Lfsvc,INFORMATION,MSEDGEWIN10,10/17/2017 10:17:13 AM,1,None,"Geolocation positioning is enabled.  "
266,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:17:06 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 96 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
265,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:16:43 AM,7040,SYSTEM\NT AUTHORITY,"The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start.  "
264,System,DCOM,ERROR,MSEDGEWIN10,10/17/2017 10:16:14 AM,10016,LOCAL SERVICE\NT AUTHORITY,"Message text not available.  Insertion strings: machine-default Local Activation {C2F03A33-21F5-47FA-B4BB-156362A2F239} {316CDED5-E4AE-4B15-9113-7055D84DCC97} NT AUTHORITY LOCAL SERVICE S-1-5-19 LocalHost (Using LRPC) Unavailable Unavailable  "
263,System,DCOM,ERROR,MSEDGEWIN10,10/17/2017 10:16:14 AM,10016,LOCAL SERVICE\NT AUTHORITY,"Message text not available.  Insertion strings: application-specific Local Activation {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} NT AUTHORITY LOCAL SERVICE S-1-5-19 LocalHost (Using LRPC) Unavailable Unavailable  "
262,System,DCOM,ERROR,MSEDGEWIN10,10/17/2017 10:16:14 AM,10016,LOCAL SERVICE\NT AUTHORITY,"Message text not available.  Insertion strings: machine-default Local Activation {C2F03A33-21F5-47FA-B4BB-156362A2F239} {316CDED5-E4AE-4B15-9113-7055D84DCC97} NT AUTHORITY LOCAL SERVICE S-1-5-19 LocalHost (Using LRPC) Unavailable Unavailable  "
261,System,DCOM,ERROR,MSEDGEWIN10,10/17/2017 10:16:14 AM,10016,LOCAL SERVICE\NT AUTHORITY,"Message text not available.  Insertion strings: application-specific Local Activation {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} NT AUTHORITY LOCAL SERVICE S-1-5-19 LocalHost (Using LRPC) Unavailable Unavailable  "
260,System,DCOM,ERROR,MSEDGEWIN10,10/17/2017 10:16:14 AM,10016,LOCAL SERVICE\NT AUTHORITY,"Message text not available.  Insertion strings: machine-default Local Activation {C2F03A33-21F5-47FA-B4BB-156362A2F239} {316CDED5-E4AE-4B15-9113-7055D84DCC97} NT AUTHORITY LOCAL SERVICE S-1-5-19 LocalHost (Using LRPC) Unavailable Unavailable  "
259,System,DCOM,ERROR,MSEDGEWIN10,10/17/2017 10:16:14 AM,10016,LOCAL SERVICE\NT AUTHORITY,"Message text not available.  Insertion strings: application-specific Local Activation {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} NT AUTHORITY LOCAL SERVICE S-1-5-19 LocalHost (Using LRPC) Unavailable Unavailable  "
258,System,DCOM,ERROR,MSEDGEWIN10,10/17/2017 10:16:14 AM,10016,LOCAL SERVICE\NT AUTHORITY,"Message text not available.  Insertion strings: machine-default Local Activation {C2F03A33-21F5-47FA-B4BB-156362A2F239} {316CDED5-E4AE-4B15-9113-7055D84DCC97} NT AUTHORITY LOCAL SERVICE S-1-5-19 LocalHost (Using LRPC) Unavailable Unavailable  "
257,System,DCOM,ERROR,MSEDGEWIN10,10/17/2017 10:16:14 AM,10016,LOCAL SERVICE\NT AUTHORITY,"Message text not available.  Insertion strings: application-specific Local Activation {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} NT AUTHORITY LOCAL SERVICE S-1-5-19 LocalHost (Using LRPC) Unavailable Unavailable  "
256,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 10:16:11 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
255,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 10:16:05 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
254,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 10:16:05 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
253,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:16:02 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 100 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.BingWeather_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
252,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 10:16:00 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
251,System,Microsoft-Windows-WindowsUpdateClient,INFORMATION,MSEDGEWIN10,10/17/2017 10:16:00 AM,44,SYSTEM\NT AUTHORITY,"Windows Update started downloading an update.  "
250,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:15:04 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 108 \??\C:\Users\IEUser\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\Settings\settings.dat 3 1  "
249,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:15:03 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 109 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
248,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:15:02 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 101 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
247,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:15:02 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 114 \??\C:\Users\IEUser\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
246,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:15:01 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 102 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.WindowsCamera_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
245,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:15:01 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 103 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
244,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:15:01 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 116 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\Settings\settings.dat 3 1  "
243,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:15:01 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 102 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Settings\settings.dat 3 1  "
242,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:59 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 105 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat 3 1  "
241,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/17/2017 10:14:55 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
240,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:51 AM,7001,SYSTEM\NT AUTHORITY,"User Logon Notification for Customer Experience Improvement Program  "
239,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:50 AM,7026,None,"The following boot-start or system-start driver(s) did not load:   dam  "
238,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:48 AM,51046,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is started  "
237,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:48 AM,50103,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client registered for shutdown notification  "
236,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:48 AM,50036,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is started  "
235,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:48 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'storqosflt' (10.0, 2005-04-24T02:53:05.000000000Z) has successfully loaded and registered with Filter Manager.  "
234,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:48 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'CldFlt' (10.0, 2066-03-30T02:16:41.000000000Z) has successfully loaded and registered with Filter Manager.  "
233,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:48 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'wcifs' (10.0, 2014-12-24T18:01:46.000000000Z) has successfully loaded and registered with Filter Manager.  "
232,System,Service Control Manager,ERROR,MSEDGEWIN10,10/17/2017 10:14:48 AM,7000,None,"The luafv service failed to start due to the following error:   %%1275  "
231,System,Microsoft-Windows-Directory-Services-SAM,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:47 AM,16962,SYSTEM\NT AUTHORITY,"Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).  For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.  "
230,System,Microsoft-Windows-Wininit,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:47 AM,14,SYSTEM\NT AUTHORITY,"Credential Guard (LsaIso.exe) configuration: 0, 0  "
229,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:46 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 1 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2667  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
228,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:46 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 0 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2667  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
227,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:45 AM,172,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 2 6  "
226,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:45 AM,508,None,"Message text not available.  Insertion strings: 2  "
225,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:45 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'npsvctrig' (10.0, 2070-05-05T07:38:28.000000000Z) has successfully loaded and registered with Filter Manager.  "
224,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:45 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileCrypt' (10.0, 2013-05-08T05:49:03.000000000Z) has successfully loaded and registered with Filter Manager.  "
223,System,Microsoft-Windows-Ntfs,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:45 AM,98,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: C: \Device\HarddiskVolume1 0  "
222,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:45 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'WdFilter' (10.0, 2001-08-08T07:54:57.000000000Z) has successfully loaded and registered with Filter Manager.  "
221,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:45 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'Wof' (10.0, 2102-10-27T16:46:39.000000000Z) has successfully loaded and registered with Filter Manager.  "
220,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:45 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileInfo' (10.0, 1983-09-10T01:46:43.000000000Z) has successfully loaded and registered with Filter Manager.  "
219,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:43 AM,32,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  "
218,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:43 AM,18,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
217,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:43 AM,25,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
216,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:43 AM,27,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  NOEXECUTE=OPTIN  "
215,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:43 AM,20,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: true true 1 2  "
214,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:43 AM,153,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0 0 0  "
213,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:43 AM,12,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 10 0 16299 15 0 0 2017-10-17T18:14:43.487098400Z  "
212,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:34 AM,13,None,"Message text not available.  Insertion strings: 2017-10-17T18:14:34.178799200Z  "
211,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:33 AM,109,None,"Message text not available.  Insertion strings: 5 0 5  "
210,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:48 AM,6013,None,"The system uptime is 4 seconds.  "
209,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:48 AM,6005,None,"The Event log service was started.  "
208,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:48 AM,6009,None,"Microsoft (R) Windows (R) 10.00. 16299 ? Multiprocessor Free.  "
207,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:33 AM,50037,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is stopped. ShutDown Flag value is 1  "
206,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:33 AM,50106,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 is waiting on DHCPv6 service to stop  "
205,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:33 AM,51057,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service stop is almost done.DHCP Context Ref count is 1  "
204,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:33 AM,51057,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service stop is almost done.DHCP Context Ref count is 1  "
203,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:33 AM,51047,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is stopped. ShutDown Flag value is 1  "
202,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:32 AM,50105,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT  "
201,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:32 AM,50104,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client received shutdown notification  "
200,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:32 AM,7002,SYSTEM\NT AUTHORITY,"User Logoff Notification for Customer Experience Improvement Program  "
199,System,DCOM,ERROR,MSEDGEWIN10,10/17/2017 10:14:32 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: Microsoft.Windows.Photos_2017.37071.16410.0_x64__8wekyb3d8bbwe!App.AppX7jktj9tkq9wvy6vgdmk01c27hm98yt2s.mca  "
198,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:33 AM,6006,None,"The Event log service was stopped.  "
197,System,DCOM,ERROR,MSEDGEWIN10,10/17/2017 10:14:31 AM,10001,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: "C:\Windows\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca 31 Microsoft.Windows.Cortana_1.9.6.16299_neutral_neutral_cw5n1h2txyewy!CortanaUI.AppX6jbm6fjqte5wzzrf5807m7eq0z44q5gf.mca Unavailable Unavailable  "
196,System,DCOM,ERROR,MSEDGEWIN10,10/17/2017 10:14:31 AM,10001,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: "C:\Windows\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca 31 Microsoft.Windows.Cortana_1.9.6.16299_neutral_neutral_cw5n1h2txyewy!CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca Unavailable Unavailable  "
195,System,DCOM,ERROR,MSEDGEWIN10,10/17/2017 10:14:31 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: Microsoft.Windows.Cortana_1.9.6.16299_neutral_neutral_cw5n1h2txyewy!CortanaUI.AppXfbn8w4s0jbk3tjevpcn9kaxerc6rby8k.mca  "
194,System,DCOM,ERROR,MSEDGEWIN10,10/17/2017 10:14:31 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: microsoft.windowscommunicationsapps_17.8241.41275.0_x64__8wekyb3d8bbwe!microsoft.windowslive.mail.AppXnkkdvsgjva9ekjq4yw99zb8vy45jkyrc.mca  "
193,System,DCOM,ERROR,MSEDGEWIN10,10/17/2017 10:14:31 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}  "
192,System,Service Control Manager,ERROR,MSEDGEWIN10,10/17/2017 10:14:31 AM,7031,None,"The Windows Push Notifications User Service_a8b4d service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service.  "
191,System,DCOM,ERROR,MSEDGEWIN10,10/17/2017 10:14:31 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: Microsoft.WindowsStore_11706.1002.9.0_x64__8wekyb3d8bbwe!App.AppXxxnt3skd41veb34vkvcyva53g0wwk0gg.mca  "
190,System,DCOM,ERROR,MSEDGEWIN10,10/17/2017 10:14:31 AM,10001,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: "C:\Windows\system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca 31 Microsoft.Windows.ContentDeliveryManager_10.0.16299.15_neutral_neutral_cw5n1h2txyewy!App.AppXyvyv4mghdjas8j88defq0w1hc410kvzt.mca Unavailable Unavailable  "
189,System,DCOM,ERROR,MSEDGEWIN10,10/17/2017 10:14:31 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: Microsoft.Windows.ShellExperienceHost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy!App.AppXwhdderkt74nnvf5ddbhdq4cvjgtvetha.mca  "
188,System,DCOM,ERROR,MSEDGEWIN10,10/17/2017 10:14:31 AM,10001,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: "C:\Windows\system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca 31 Microsoft.Windows.ContentDeliveryManager_10.0.16299.15_neutral_neutral_cw5n1h2txyewy!App.AppXwdz8g2fxr36xz0tdtagygnvemf85s7gg.mca Unavailable Unavailable  "
187,System,DCOM,ERROR,MSEDGEWIN10,10/17/2017 10:14:31 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: Microsoft.Windows.ContentDeliveryManager_10.0.16299.15_neutral_neutral_cw5n1h2txyewy!App.AppXw3qcpc7p849541dp39vvqd01bn7z9ybh.mca  "
186,System,DCOM,ERROR,MSEDGEWIN10,10/17/2017 10:14:31 AM,10010,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: Microsoft.Windows.ShellExperienceHost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy!App.AppXwhdderkt74nnvf5ddbhdq4cvjgtvetha.mca  "
185,System,User32,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:30 AM,1074,IEUser\MSEDGEWIN10,"The process C:\Windows\system32\wbem\wmiprvse.exe (MSEDGEWIN10) has initiated the restart of computer MSEDGEWIN10 on behalf of user MSEDGEWIN10\IEUser for the following reason: No title for this reason could be found   Reason Code: 0x80070015   Shutdown Type: restart   Comment: ?  "
184,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:06 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 104 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat 3 1  "
183,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:06 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 116 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat 3 1  "
182,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:14:06 AM,16,IEUser\MSEDGEWIN10,"Message text not available.  Insertion strings: 119 \??\C:\Users\IEUser\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat 3 1  "
181,System,Microsoft-Windows-GroupPolicy,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:52 AM,1501,IEUser\MSEDGEWIN10,"The Group Policy settings for the user were processed successfully. There were no changes detected since the last successful processing of Group Policy.  "
180,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:51 AM,7001,SYSTEM\NT AUTHORITY,"User Logon Notification for Customer Experience Improvement Program  "
179,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:51 AM,7002,SYSTEM\NT AUTHORITY,"User Logoff Notification for Customer Experience Improvement Program  "
178,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/17/2017 10:13:40 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
177,System,Service Control Manager,ERROR,MSEDGEWIN10,10/17/2017 10:13:39 AM,7030,None,"The Printer Extensions and Notifications service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.  "
176,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:39 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  Printer Extensions and Notifications  Service File Name:  %SystemRoot%\system32\svchost.exe -k print  Service Type:  user mode service  Service Start Type:  demand start  Service Account:  LocalSystem  "
175,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:38 AM,16,None,"Message text not available.  Insertion strings: 125 \??\C:\Users\defaultuser0\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat 3 1  "
174,System,Microsoft-Windows-TPM-WMI,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:37 AM,1282,SYSTEM\NT AUTHORITY,"The TBS device identifier has been generated.  "
173,System,Lfsvc,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:37 AM,1,None,"Geolocation positioning is enabled.  "
172,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:34 AM,16,None,"Message text not available.  Insertion strings: 122 \??\C:\Users\defaultuser0\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\Settings\settings.dat 3 1  "
171,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:34 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 45 \??\C:\Windows\AppCompat\Programs\Amcache.hve 0 0  "
170,System,Microsoft-Windows-TPM-WMI,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:32 AM,1281,SYSTEM\NT AUTHORITY,"This event triggers the TBS device identifier generation.  "
169,System,Microsoft-Windows-GroupPolicy,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:30 AM,1501,None,"The Group Policy settings for the user were processed successfully. There were no changes detected since the last successful processing of Group Policy.  "
168,System,Microsoft-Windows-Winlogon,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:30 AM,7001,SYSTEM\NT AUTHORITY,"User Logon Notification for Customer Experience Improvement Program  "
167,System,Microsoft-Windows-DNS-Client,WARNING,MSEDGEWIN10,10/17/2017 10:13:30 AM,1014,NETWORK SERVICE\NT AUTHORITY,"Name resolution for the name wpad timed out after none of the configured DNS servers responded.  "
166,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:30 AM,7040,NETWORK SERVICE\NT AUTHORITY,"The start type of the Delivery Optimization service was changed from demand start to auto start.  "
165,System,Microsoft-Windows-GroupPolicy,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:29 AM,1500,SYSTEM\NT AUTHORITY,"The Group Policy settings for the computer were processed successfully. There were no changes detected since the last successful processing of Group Policy.  "
164,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:27 AM,1,LOCAL SERVICE\NT AUTHORITY,"Possible detection of CVE: 2017-10-17T18:13:27.699516700Z  Additional Information: 2017-10-17T18:13:27.699596200Z    This Event is generated when an attempt to exploit a known vulnerability (2017-10-17T18:13:27.699516700Z) is detected.  This Event is raised by a User mode process.    "
163,System,Microsoft-Windows-Time-Service,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:26 AM,35,LOCAL SERVICE\NT AUTHORITY,"The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->10.222.112.26:123) with reference id 443604490. Current local stratum number is 4.  "
162,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:25 AM,1,SYSTEM\NT AUTHORITY,"Possible detection of CVE: 2017-10-17T18:13:25.441873600Z  Additional Information: 2017-10-17T18:13:25.441873600Z    This Event is generated when an attempt to exploit a known vulnerability (2017-10-17T18:13:25.441873600Z) is detected.  This Event is raised by a User mode process.    "
161,System,Service Control Manager,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:25 AM,7026,None,"The following boot-start or system-start driver(s) did not load:   dam  "
160,System,Microsoft-Windows-Time-Service,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:24 AM,37,LOCAL SERVICE\NT AUTHORITY,"The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->10.222.112.26:123).  "
159,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:23 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'storqosflt' (10.0, 2005-04-24T02:53:05.000000000Z) has successfully loaded and registered with Filter Manager.  "
158,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:23 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'CldFlt' (10.0, 2066-03-30T02:16:41.000000000Z) has successfully loaded and registered with Filter Manager.  "
157,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:23 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'wcifs' (10.0, 2014-12-24T18:01:46.000000000Z) has successfully loaded and registered with Filter Manager.  "
156,System,Service Control Manager,ERROR,MSEDGEWIN10,10/17/2017 10:13:23 AM,7000,None,"The luafv service failed to start due to the following error:   %%1275  "
155,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:21 AM,51046,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is started  "
154,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:21 AM,50103,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client registered for shutdown notification  "
153,System,Microsoft-Windows-Dhcp-Client,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:21 AM,50036,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is started  "
152,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:19 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 31 \??\C:\Users\Default\NTUSER.DAT 617 36  "
151,System,Microsoft-Windows-Directory-Services-SAM,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:12 AM,16962,SYSTEM\NT AUTHORITY,"Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).  For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.  "
150,System,Microsoft-Windows-Wininit,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:12 AM,14,SYSTEM\NT AUTHORITY,"Credential Guard (LsaIso.exe) configuration: 0, 0  "
149,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:11 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 1 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2667  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
148,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:11 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 0 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2667  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
147,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:10 AM,172,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 2 6  "
146,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:10 AM,508,None,"Message text not available.  Insertion strings: 2  "
145,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:10 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'npsvctrig' (10.0, 2070-05-05T07:38:28.000000000Z) has successfully loaded and registered with Filter Manager.  "
144,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:10 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileCrypt' (10.0, 2013-05-08T05:49:03.000000000Z) has successfully loaded and registered with Filter Manager.  "
143,System,Microsoft-Windows-Ntfs,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:10 AM,98,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: C: \Device\HarddiskVolume1 0  "
142,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:10 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'WdFilter' (10.0, 2001-08-08T07:54:57.000000000Z) has successfully loaded and registered with Filter Manager.  "
141,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:10 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'Wof' (10.0, 2102-10-27T16:46:39.000000000Z) has successfully loaded and registered with Filter Manager.  "
140,System,Microsoft-Windows-FilterManager,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:10 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileInfo' (10.0, 1983-09-10T01:46:43.000000000Z) has successfully loaded and registered with Filter Manager.  "
139,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:08 AM,32,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  "
138,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:08 AM,18,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
137,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:08 AM,25,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
136,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:08 AM,27,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  NOEXECUTE=OPTIN  "
135,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:08 AM,20,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: true true 0 2  "
134,System,Microsoft-Windows-Kernel-Boot,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:08 AM,153,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0 0 0  "
133,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:08 AM,12,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 10 0 16299 15 0 0 2017-10-17T18:13:08.486785100Z  "
132,System,Microsoft-Windows-Kernel-General,INFORMATION,MSEDGEWIN10,10/17/2017 10:12:57 AM,13,None,"Message text not available.  Insertion strings: 2017-10-17T18:12:57.495326600Z  "
131,System,Microsoft-Windows-Kernel-Power,INFORMATION,MSEDGEWIN10,10/17/2017 10:12:56 AM,109,None,"Message text not available.  Insertion strings: 5 0 5  "
130,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:21 AM,6013,None,"The system uptime is 12 seconds.  "
129,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:21 AM,6005,None,"The Event log service was started.  "
128,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:21 AM,6009,None,"Microsoft (R) Windows (R) 10.00. 16299 ? Multiprocessor Free.  "
127,System,EventLog,INFORMATION,MSEDGEWIN10,10/17/2017 10:13:21 AM,6011,None,"The NetBIOS name and DNS host name of this machine have been changed from IEUSER-Q61L06H5 to MSEDGEWIN10.  "
126,System,Microsoft-Windows-Dhcp-Client,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:56 AM,50037,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is stopped. ShutDown Flag value is 1  "
125,System,Microsoft-Windows-Dhcp-Client,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:56 AM,50106,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 is waiting on DHCPv6 service to stop  "
124,System,Microsoft-Windows-Dhcp-Client,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:56 AM,50105,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT  "
123,System,Microsoft-Windows-Dhcp-Client,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:56 AM,50104,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client received shutdown notification  "
122,System,User32,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:56 AM,1074,SYSTEM\NT AUTHORITY,"The process C:\Windows\system32\winlogon.exe (MINWINPC) has initiated the restart of computer IEUSER-Q61L06H5 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Upgrade (Planned)   Reason Code: 0x80020003   Shutdown Type: restart   Comment: ?  "
121,System,Microsoft-Windows-Setup,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:55 AM,2004,SYSTEM\NT AUTHORITY,"Successfully logged OS information  "
120,System,Microsoft-Windows-Setup,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:55 AM,2003,SYSTEM\NT AUTHORITY,"Successfully logged Setup information  "
119,System,EventLog,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:56 AM,6006,None,"The Event log service was stopped.  "
118,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:54 AM,1,SYSTEM\NT AUTHORITY,"Possible detection of CVE: 2017-10-17T18:12:55.010000000Z  Additional Information: 2017-10-17T18:12:55.022213200Z    This Event is generated when an attempt to exploit a known vulnerability (2017-10-17T18:12:55.010000000Z) is detected.  This Event is raised by a User mode process.    "
117,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:55 AM,1,SYSTEM\NT AUTHORITY,"Possible detection of CVE: 2017-10-17T18:12:55.010464000Z  Additional Information: 2017-10-17T18:12:55.010464000Z    This Event is generated when an attempt to exploit a known vulnerability (2017-10-17T18:12:55.010464000Z) is detected.  This Event is raised by a User mode process.    "
116,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:54 AM,15,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 52 \??\C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT 11726848 11681792  "
115,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:53 AM,15,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 41 \??\C:\Windows\System32\config\COMPONENTS 29327360 29536256  "
114,System,Microsoft-Windows-UserModePowerService,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:52 AM,22,SYSTEM\NT AUTHORITY,"Reapply power settings upon completion of the provisioning engine's turn 1  "
113,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:48 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 85 \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat 0 0  "
112,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:44 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 135 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneVideo_10.17063.24021.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
111,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:42 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 135 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneMusic_10.17063.24021.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
110,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:40 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 145 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxSpeechToTextOverlay_1.17.29001.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
109,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:40 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 142 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxIdentityProvider_12.30.5001.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
108,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:40 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 137 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGameOverlay_1.20.25002.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
107,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:39 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 130 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxApp_31.32.16002.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
106,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:38 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 130 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Xbox.TCUI_1.8.24001.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
105,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:37 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 136 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_11706.1002.9.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
104,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:36 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 144 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsSoundRecorder_10.1706.1561.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
103,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:35 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 134 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsMaps_5.1706.2261.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
102,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:31 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 141 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsFeedbackHub_1.1705.2121.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
101,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:29 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 150 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\microsoft.windowscommunicationsapps_17.8241.41275.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
100,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:22 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 136 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCamera_2017.727.20.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
099,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:21 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 141 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCalculator_10.1706.2406.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
098,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:20 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 137 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAlarms_10.1706.2401.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
097,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:18 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 142 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Photos_2017.37071.16410.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
096,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:16 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 127 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
095,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:16 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 143 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StorePurchaseApp_11706.1707.7010.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
094,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:15 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 129 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.SkypeApp_11.18.596.0_x64__kzf8qxf38zg5c\ActivationStore.dat 0 0  "
093,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:11 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 127 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Print3D_1.0.2422.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
092,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:10 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 127 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.People_10.2.2351.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
091,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:09 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 133 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.OneConnect_3.1708.2224.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
090,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:08 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 139 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Office.OneNote_17.8366.57611.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
089,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:04 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 130 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MSPaint_2.1709.4027.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
088,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:02 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 137 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftStickyNotes_1.8.2.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
087,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:12:01 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 149 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftSolitaireCollection_3.17.8162.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
086,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:58 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 142 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftOfficeHub_17.8414.5925.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
085,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:56 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 141 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Microsoft3DViewer_1.1707.26019.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
084,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:56 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 131 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Messaging_3.32.15001.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
083,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:55 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 131 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Getstarted_5.11.1641.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
082,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:54 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 131 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.GetHelp_10.1706.1811.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
081,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:53 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 140 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.DesktopAppInstaller_1.0.12161.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
080,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:52 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 132 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BingWeather_4.21.2492.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
079,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:51 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 137 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1705.4.0_x86__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
078,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:51 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 137 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Advertising.Xaml_10.1705.4.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
077,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:49 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 146 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.1610.0_x64__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
076,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:49 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 146 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Services.Store.Engagement_10.0.1610.0_x86__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
075,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:49 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 137 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Windows.PrintDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
074,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:49 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 151 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\windows.immersivecontrolpanel_10.0.1.1000_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
073,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:48 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 154 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGameCallableUI_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
072,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:48 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 161 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
071,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:48 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 165 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.SecureAssessmentBrowser_10.0.16299.15_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
070,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:48 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 153 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\ActivationStore.dat 0 0  "
069,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:48 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 146 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.SecHealthUI_10.0.16299.15_neutral__cw5n1h2txyewy\ActivationStore.dat 0 0  "
068,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:47 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 162 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.PinningConfirmationDialog_1000.16299.15.0_neutral__cw5n1h2txyewy\ActivationStore.dat 0 0  "
067,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:47 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 162 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.PeopleExperienceHost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
066,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:47 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 160 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ParentalControls_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
065,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:47 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 160 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.OOBENetworkConnectionFlow_10.0.16299.15_neutral__cw5n1h2txyewy\ActivationStore.dat 0 0  "
064,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:47 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 159 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.OOBENetworkCaptivePortal_10.0.16299.15_neutral__cw5n1h2txyewy\ActivationStore.dat 0 0  "
063,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:47 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 161 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.HolographicFirstRun_10.0.16299.15_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
062,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:47 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 147 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Cortana_1.9.6.16299_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
061,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:46 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 164 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.16299.15_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
060,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:46 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 161 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.CloudExperienceHost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
059,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:46 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 165 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.AssignedAccessLockApp_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
058,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:46 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 157 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Apprep.ChxApp_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
057,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:45 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 147 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.PPIProjection_10.0.16299.15_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
056,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:45 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 140 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftEdge_41.16299.15.0_neutral__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
055,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:45 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 134 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.LockApp_10.0.16299.15_neutral__cw5n1h2txyewy\ActivationStore.dat 0 0  "
054,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:45 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 132 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ECApp_10.0.16299.15_neutral__8wekyb3d8bbwe\ActivationStore.dat 0 0  "
053,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:45 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 141 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.CredDialogHost_10.0.16299.15_neutral__cw5n1h2txyewy\ActivationStore.dat 0 0  "
052,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:44 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 140 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BioEnrollment_10.0.16299.15_neutral__cw5n1h2txyewy\ActivationStore.dat 0 0  "
051,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:44 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 142 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AccountsControl_10.0.16299.15_neutral__cw5n1h2txyewy\ActivationStore.dat 0 0  "
050,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:44 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 152 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AAD.BrokerPlugin_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
049,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:44 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 35 \??\C:\Windows\system32\Config\Elam 1 1  "
048,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:44 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 134 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\InputApp_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
047,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:44 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 160 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.16299.15_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
046,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:44 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 160 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.16299.15_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
045,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:43 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 160 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.16299.15_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
044,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:43 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 160 \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.16299.15_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat 0 0  "
043,System,Microsoft-Windows-UserPnp,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:42 AM,20001,SYSTEM\NT AUTHORITY,"Driver Management concluded the process to install driver display.inf_amd64_60c1a4bf569f6de9\display.inf for Device Instance ID PCI\VEN_15AD&DEV_0405&SUBSYS_040515AD&REV_00\3&61AAA01&0&78 with the following status: 0x0.  "
042,System,Microsoft-Windows-UserPnp,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:41 AM,20001,SYSTEM\NT AUTHORITY,"Driver Management concluded the process to install driver nete1g3e.inf_amd64_af58b4e19562a3f9\nete1g3e.inf for Device Instance ID PCI\VEN_8086&DEV_100F&SUBSYS_075015AD&REV_01\4&BBF9765&0&0888 with the following status: 0x0.  "
041,System,Service Control Manager,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:37 AM,7045,SYSTEM\NT AUTHORITY,"A service was installed in the system.    Service Name:  Intel(R) PRO/1000 NDIS 6 Adapter Driver  Service File Name:  \SystemRoot\System32\drivers\E1G6032E.sys  Service Type:  kernel mode driver  Service Start Type:  demand start  Service Account:  ?  "
040,System,Service Control Manager,ERROR,IEUSER-Q61L06H5,10/17/2017 10:11:37 AM,7023,None,"The IP Helper service terminated with the following error:   %%21  "
039,System,Service Control Manager,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:37 AM,7026,None,"The following boot-start or system-start driver(s) did not load:   CSC  dam  "
038,System,Workstation,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:37 AM,3261,None,"This computer has been successfully joined to workgroup 'WORKGROUP'.  "
037,System,Service Control Manager,ERROR,IEUSER-Q61L06H5,10/17/2017 10:11:36 AM,7023,None,"The Spooler service terminated with the following error:   %%2147942414  "
036,System,Microsoft-Windows-DHCPv6-Client,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:35 AM,51046,LOCAL SERVICE\NT AUTHORITY,"DHCPv6 client service is started  "
035,System,Microsoft-Windows-Dhcp-Client,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:35 AM,50103,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client registered for shutdown notification  "
034,System,Microsoft-Windows-Dhcp-Client,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:35 AM,50036,LOCAL SERVICE\NT AUTHORITY,"DHCPv4 client service is started  "
033,System,Microsoft-Windows-FilterManager,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:35 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'storqosflt' (10.0, 2005-04-24T02:53:05.000000000Z) has successfully loaded and registered with Filter Manager.  "
032,System,Microsoft-Windows-FilterManager,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:35 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'CldFlt' (10.0, 2066-03-30T02:16:41.000000000Z) has successfully loaded and registered with Filter Manager.  "
031,System,Microsoft-Windows-FilterManager,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:35 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'wcifs' (10.0, 2014-12-24T18:01:46.000000000Z) has successfully loaded and registered with Filter Manager.  "
030,System,Service Control Manager,ERROR,IEUSER-Q61L06H5,10/17/2017 10:11:35 AM,7000,None,"The luafv service failed to start due to the following error:   %%1275  "
029,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:35 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 31 \SystemRoot\System32\Config\BBI 1 1  "
028,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:27 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 54 \??\C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT 617 36  "
027,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:26 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 56 \??\C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT 617 36  "
026,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:26 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 31 \SystemRoot\System32\Config\SAM 1 1  "
025,System,Microsoft-Windows-Directory-Services-SAM,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:26 AM,16962,SYSTEM\NT AUTHORITY,"Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).  For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.  "
024,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:26 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 36 \SystemRoot\System32\Config\SECURITY 1 1  "
023,System,Microsoft-Windows-Wininit,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:26 AM,14,SYSTEM\NT AUTHORITY,"Credential Guard (LsaIso.exe) configuration: 0, 0  "
022,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:25 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 35 \SystemRoot\System32\Config\DEFAULT 70 6  "
021,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:25 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 36 \SystemRoot\System32\Config\SOFTWARE 226511 15092  "
020,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:24 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 32 \Device\HarddiskVolume1\Boot\BCD 78 4  "
019,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:24 AM,16,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 35 \SystemRoot\System32\config\DRIVERS 1 1  "
018,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:23 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 1 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2667  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
017,System,Microsoft-Windows-Kernel-Processor-Power,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:23 AM,55,SYSTEM\NT AUTHORITY,"Hyper-V logical processor 0 exposes the following power management capabilities:    Idle state type: 1 (1 state(s))    Performance state type: 1  Nominal Frequency (MHz): 2667  Maximum performance percentage: 100  Minimum performance percentage: 100  Minimum throttle percentage: 12  "
016,System,Microsoft-Windows-Kernel-Power,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:23 AM,172,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 2 6  "
015,System,Microsoft-Windows-Kernel-Power,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:23 AM,508,None,"Message text not available.  Insertion strings: 2  "
014,System,Microsoft-Windows-FilterManager,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:22 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'npsvctrig' (10.0, 2070-05-05T07:38:28.000000000Z) has successfully loaded and registered with Filter Manager.  "
013,System,Microsoft-Windows-FilterManager,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:22 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileCrypt' (10.0, 2013-05-08T05:49:03.000000000Z) has successfully loaded and registered with Filter Manager.  "
012,System,Microsoft-Windows-Ntfs,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:22 AM,98,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: C: \Device\HarddiskVolume1 0  "
011,System,Microsoft-Windows-FilterManager,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:22 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'WdFilter' (10.0, 2001-08-08T07:54:57.000000000Z) has successfully loaded and registered with Filter Manager.  "
010,System,Microsoft-Windows-FilterManager,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:22 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'Wof' (10.0, 2102-10-27T16:46:39.000000000Z) has successfully loaded and registered with Filter Manager.  "
009,System,Microsoft-Windows-FilterManager,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:22 AM,6,SYSTEM\NT AUTHORITY,"File System Filter 'FileInfo' (10.0, 1983-09-10T01:46:43.000000000Z) has successfully loaded and registered with Filter Manager.  "
008,System,Microsoft-Windows-Kernel-Boot,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:16 AM,32,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  "
007,System,Microsoft-Windows-Kernel-Boot,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:16 AM,18,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
006,System,Microsoft-Windows-Kernel-Boot,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:16 AM,25,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 1  "
005,System,Microsoft-Windows-Kernel-Boot,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:16 AM,27,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0  NOEXECUTE=OPTIN  "
004,System,Microsoft-Windows-Kernel-Boot,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:16 AM,153,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 0 0 0  "
003,System,Microsoft-Windows-Kernel-General,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:16 AM,12,SYSTEM\NT AUTHORITY,"Message text not available.  Insertion strings: 10 0 16299 15 0 0 2017-10-17T18:11:16.489947300Z  "
002,System,EventLog,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:35 AM,6005,None,"The Event log service was started.  "
001,System,EventLog,INFORMATION,IEUSER-Q61L06H5,10/17/2017 10:11:35 AM,6009,None,"Microsoft (R) Windows (R) 10.00. 16299 ? Multiprocessor Free.  "
