Deploiement_Server

257 KiB

Raw Blame History

1	host	New_Process_Name	source	EventCode
2	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
3	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
4	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
5	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
6	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
7	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
8	we8105desk	C:\Windows\System32\taskhost.exe	WinEventLog:Security	4688
9	we8105desk	C:\Windows\SysWOW64\dllhost.exe	WinEventLog:Security	4688
10	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
11	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
12	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
13	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
14	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
15	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
16	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
17	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
18	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
19	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
20	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
21	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
22	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
23	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
24	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
25	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
26	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
27	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
28	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
29	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
30	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
31	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
32	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
33	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
34	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
35	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
36	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
37	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
38	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
39	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
40	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
41	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
42	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
43	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
44	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
45	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
46	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
47	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
48	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
49	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
50	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
51	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
52	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
53	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
54	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
55	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
56	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
57	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
58	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
59	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
60	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
61	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
62	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
63	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
64	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
65	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
66	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
67	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
68	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
69	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
70	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
71	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
72	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
73	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
74	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
75	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
76	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
77	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
78	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
79	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
80	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
81	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
82	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
83	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
84	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
85	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
86	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
87	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
88	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
89	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
90	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
91	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
92	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
93	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
94	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
95	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
96	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
97	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
98	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
99	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
100	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
101	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
102	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
103	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
104	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
105	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
106	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
107	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
108	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
109	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
110	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
111	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
112	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
113	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
114	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
115	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
116	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
117	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
118	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
119	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
120	we8105desk	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
121	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
122	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
123	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
124	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
125	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
126	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
127	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
128	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
129	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
130	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
131	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
132	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
133	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
134	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
135	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
136	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
137	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
138	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
139	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
140	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
141	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
142	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
143	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
144	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
145	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
146	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
147	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
148	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
149	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
150	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
151	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
152	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
153	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
154	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
155	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
156	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
157	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
158	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
159	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
160	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
161	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
162	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
163	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
164	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
165	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
166	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
167	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
168	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
169	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
170	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
171	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
172	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
173	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
174	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
175	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
176	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
177	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
178	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
179	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
180	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
181	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
182	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
183	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
184	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
185	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
186	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
187	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
188	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
189	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
190	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
191	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
192	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
193	we8105desk	C:\Windows\System32\w32tm.exe	WinEventLog:Security	4688
194	we8105desk	C:\Windows\System32\PING.EXE	WinEventLog:Security	4688
195	we8105desk	C:\Windows\System32\w32tm.exe	WinEventLog:Security	4688
196	we8105desk	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\cvtres.exe	WinEventLog:Security	4688
197	we8105desk	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\csc.exe	WinEventLog:Security	4688
198	we8105desk	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
199	we8105desk	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\cvtres.exe	WinEventLog:Security	4688
200	we8105desk	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\csc.exe	WinEventLog:Security	4688
201	we8105desk	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\cvtres.exe	WinEventLog:Security	4688
202	we8105desk	C:\Windows\Microsoft.NET\Framework64\v2.0.50727\csc.exe	WinEventLog:Security	4688
203	we8105desk	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
204	we8105desk	C:\Windows\System32\sdiagnhost.exe	WinEventLog:Security	4688
205	we8105desk	C:\Windows\System32\svchost.exe	WinEventLog:Security	4688
206	we8105desk	C:\Windows\System32\taskhost.exe	WinEventLog:Security	4688
207	we8105desk	C:\Windows\System32\VSSVC.exe	WinEventLog:Security	4688
208	we8105desk	C:\Windows\System32\SearchFilterHost.exe	WinEventLog:Security	4688
209	we8105desk	C:\Windows\System32\SearchProtocolHost.exe	WinEventLog:Security	4688
210	we8105desk	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
211	we8105desk	C:\Windows\System32\mcbuilder.exe	WinEventLog:Security	4688
212	we8105desk	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
213	we8105desk	C:\Windows\System32\rundll32.exe	WinEventLog:Security	4688
214	we8105desk	C:\Windows\System32\lpremove.exe	WinEventLog:Security	4688
215	we8105desk	C:\Windows\System32\rundll32.exe	WinEventLog:Security	4688
216	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
217	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
218	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
219	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
220	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
221	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
222	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
223	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
224	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
225	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
226	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
227	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
228	we1149srv	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
229	we1149srv	C:\Windows\System32\sc.exe	WinEventLog:Security	4688
230	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
231	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
232	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
233	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
234	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
235	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
236	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
237	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
238	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
239	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
240	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
241	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
242	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
243	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
244	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
245	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
246	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
247	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
248	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
249	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
250	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
251	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
252	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
253	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
254	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
255	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
256	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
257	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
258	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
259	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
260	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
261	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
262	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
263	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
264	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
265	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
266	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
267	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
268	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
269	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
270	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
271	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
272	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
273	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
274	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
275	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
276	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
277	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
278	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
279	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
280	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
281	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
282	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
283	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
284	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
285	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
286	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
287	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
288	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
289	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
290	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
291	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
292	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
293	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
294	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
295	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
296	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
297	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
298	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
299	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
300	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
301	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
302	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
303	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
304	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
305	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
306	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
307	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
308	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
309	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
310	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
311	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
312	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
313	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
314	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
315	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
316	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
317	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
318	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
319	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
320	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
321	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
322	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
323	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
324	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
325	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
326	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
327	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
328	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
329	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
330	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
331	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
332	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
333	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
334	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
335	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
336	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
337	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
338	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
339	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
340	we8105desk	C:\Windows\System32\SearchFilterHost.exe	WinEventLog:Security	4688
341	we8105desk	C:\Windows\System32\SearchProtocolHost.exe	WinEventLog:Security	4688
342	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
343	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
344	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
345	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
346	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
347	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
348	we8105desk	C:\Windows\System32\svchost.exe	WinEventLog:Security	4688
349	we8105desk	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
350	we8105desk	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
351	we8105desk	C:\Windows\System32\taskhost.exe	WinEventLog:Security	4688
352	we8105desk	C:\Windows\System32\Defrag.exe	WinEventLog:Security	4688
353	we8105desk	C:\Windows\System32\aitagent.exe	WinEventLog:Security	4688
354	we8105desk	C:\Windows\System32\rundll32.exe	WinEventLog:Security	4688
355	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
356	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
357	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
358	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
359	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
360	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
361	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
362	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
363	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
364	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
365	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
366	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
367	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
368	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
369	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
370	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
371	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
372	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
373	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
374	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
375	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
376	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
377	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
378	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
379	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
380	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
381	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
382	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
383	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
384	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
385	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
386	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
387	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
388	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
389	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
390	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
391	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
392	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
393	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
394	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
395	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
396	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
397	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
398	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
399	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
400	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
401	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
402	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
403	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
404	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
405	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
406	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
407	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
408	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
409	we8105desk	C:\Windows\System32\taskhost.exe	WinEventLog:Security	4688
410	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
411	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
412	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
413	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
414	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
415	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
416	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
417	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
418	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
419	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
420	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
421	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
422	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
423	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
424	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
425	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
426	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
427	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
428	we8105desk	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
429	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
430	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
431	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
432	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
433	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
434	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
435	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
436	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
437	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
438	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
439	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
440	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
441	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
442	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
443	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
444	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
445	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
446	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
447	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
448	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
449	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
450	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
451	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
452	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
453	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
454	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
455	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
456	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
457	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
458	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
459	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
460	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
461	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
462	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
463	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
464	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
465	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
466	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
467	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
468	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
469	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
470	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
471	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
472	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
473	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
474	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
475	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
476	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
477	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
478	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
479	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
480	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
481	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
482	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
483	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
484	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
485	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
486	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
487	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
488	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
489	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
490	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
491	we8105desk	C:\Windows\SysWOW64\dllhost.exe	WinEventLog:Security	4688
492	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
493	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
494	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
495	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
496	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
497	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
498	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
499	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
500	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
501	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
502	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
503	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
504	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
505	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
506	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
507	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
508	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
509	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
510	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
511	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
512	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
513	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
514	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
515	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
516	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
517	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
518	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
519	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
520	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
521	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
522	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
523	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
524	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
525	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
526	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
527	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
528	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
529	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
530	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
531	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
532	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
533	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
534	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
535	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
536	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
537	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
538	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
539	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
540	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
541	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
542	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
543	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
544	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
545	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
546	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
547	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
548	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
549	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
550	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
551	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
552	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
553	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
554	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
555	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
556	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
557	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
558	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
559	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
560	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
561	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
562	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
563	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
564	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
565	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
566	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
567	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
568	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
569	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
570	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
571	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
572	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
573	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
574	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
575	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
576	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
577	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
578	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
579	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
580	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
581	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
582	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
583	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
584	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
585	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
586	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
587	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
588	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
589	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
590	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
591	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
592	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
593	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
594	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
595	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
596	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
597	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
598	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
599	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
600	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
601	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
602	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
603	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
604	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
605	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
606	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
607	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
608	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
609	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
610	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
611	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
612	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
613	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
614	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
615	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
616	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
617	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
618	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
619	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
620	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
621	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
622	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
623	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
624	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
625	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
626	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
627	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
628	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
629	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
630	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
631	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
632	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
633	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
634	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
635	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
636	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
637	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
638	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
639	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
640	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
641	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
642	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
643	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
644	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
645	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
646	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
647	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
648	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
649	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
650	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
651	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
652	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
653	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
654	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
655	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
656	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
657	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
658	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
659	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
660	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
661	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
662	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
663	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
664	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
665	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
666	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
667	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
668	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
669	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
670	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
671	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
672	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
673	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
674	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
675	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
676	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
677	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
678	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
679	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
680	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
681	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
682	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
683	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
684	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
685	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
686	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
687	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
688	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
689	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
690	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
691	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
692	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
693	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
694	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
695	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
696	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
697	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
698	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
699	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
700	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
701	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
702	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
703	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
704	we8105desk	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
705	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
706	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
707	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
708	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
709	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
710	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
711	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
712	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
713	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
714	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
715	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
716	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
717	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
718	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
719	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
720	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
721	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
722	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
723	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
724	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
725	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
726	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
727	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
728	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
729	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
730	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
731	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
732	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
733	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
734	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
735	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
736	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
737	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
738	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
739	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
740	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
741	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
742	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
743	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
744	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
745	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
746	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
747	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
748	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
749	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
750	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
751	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
752	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
753	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
754	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
755	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
756	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
757	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
758	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
759	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
760	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
761	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
762	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
763	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
764	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
765	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
766	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
767	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
768	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
769	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
770	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
771	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
772	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
773	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
774	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
775	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
776	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
777	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
778	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
779	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
780	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
781	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
782	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
783	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
784	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
785	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
786	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
787	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
788	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
789	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
790	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
791	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
792	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
793	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
794	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
795	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
796	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
797	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
798	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
799	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
800	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
801	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
802	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
803	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
804	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
805	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
806	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
807	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
808	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
809	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
810	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
811	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
812	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
813	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
814	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
815	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
816	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
817	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
818	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
819	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
820	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
821	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
822	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
823	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
824	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
825	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
826	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
827	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
828	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
829	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
830	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
831	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
832	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
833	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
834	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
835	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
836	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
837	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
838	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
839	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
840	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
841	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
842	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
843	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
844	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
845	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
846	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
847	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
848	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
849	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
850	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
851	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
852	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
853	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
854	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
855	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
856	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
857	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
858	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
859	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
860	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
861	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
862	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
863	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
864	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
865	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
866	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
867	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
868	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
869	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
870	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
871	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
872	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
873	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
874	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
875	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
876	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
877	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
878	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
879	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
880	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
881	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
882	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
883	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
884	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
885	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
886	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
887	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
888	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
889	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
890	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
891	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
892	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
893	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
894	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
895	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
896	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
897	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
898	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
899	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
900	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
901	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
902	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
903	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
904	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
905	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
906	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
907	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
908	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
909	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
910	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
911	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
912	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
913	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
914	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
915	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
916	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
917	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
918	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
919	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
920	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
921	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
922	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
923	we8105desk	C:\Windows\System32\SearchFilterHost.exe	WinEventLog:Security	4688
924	we8105desk	C:\Windows\System32\SearchProtocolHost.exe	WinEventLog:Security	4688
925	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
926	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
927	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
928	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
929	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
930	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
931	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
932	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
933	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
934	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
935	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
936	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
937	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
938	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
939	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
940	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
941	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
942	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
943	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
944	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
945	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
946	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
947	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
948	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
949	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
950	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
951	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
952	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
953	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
954	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
955	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
956	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
957	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
958	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
959	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
960	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
961	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
962	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
963	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
964	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
965	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
966	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
967	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
968	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
969	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
970	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
971	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
972	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
973	we8105desk	C:\Windows\System32\SearchFilterHost.exe	WinEventLog:Security	4688
974	we8105desk	C:\Windows\System32\SearchProtocolHost.exe	WinEventLog:Security	4688
975	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
976	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
977	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
978	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
979	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
980	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
981	we8105desk	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
982	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
983	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
984	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
985	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
986	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
987	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
988	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
989	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
990	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
991	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
992	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
993	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
994	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
995	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
996	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
997	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
998	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
999	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1000	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
1001	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
1002	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1003	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1004	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1005	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1006	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1007	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1008	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1009	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1010	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1011	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1012	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1013	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1014	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1015	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1016	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1017	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1018	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1019	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1020	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1021	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1022	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1023	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1024	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1025	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1026	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1027	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1028	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1029	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1030	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1031	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1032	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1033	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1034	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1035	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1036	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1037	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1038	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1039	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1040	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1041	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1042	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1043	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1044	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1045	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1046	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1047	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1048	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1049	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1050	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1051	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1052	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1053	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1054	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1055	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1056	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1057	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1058	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1059	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1060	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1061	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1062	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1063	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1064	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1065	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1066	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1067	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1068	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1069	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1070	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1071	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1072	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1073	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1074	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1075	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1076	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1077	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1078	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1079	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1080	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1081	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1082	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1083	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1084	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1085	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1086	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1087	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1088	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1089	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1090	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1091	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1092	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1093	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1094	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1095	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1096	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1097	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1098	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1099	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1100	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1101	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1102	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1103	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1104	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1105	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1106	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1107	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1108	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1109	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1110	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1111	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1112	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1113	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1114	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1115	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1116	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1117	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1118	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1119	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1120	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1121	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1122	we8105desk	C:\Windows\SysWOW64\dllhost.exe	WinEventLog:Security	4688
1123	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1124	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1125	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1126	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1127	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1128	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1129	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1130	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1131	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1132	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1133	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1134	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1135	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1136	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1137	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1138	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1139	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1140	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1141	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1142	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1143	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1144	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1145	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1146	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1147	we8105desk	C:\Windows\SysWOW64\dllhost.exe	WinEventLog:Security	4688
1148	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1149	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1150	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1151	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1152	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1153	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1154	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1155	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1156	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1157	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1158	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1159	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1160	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1161	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1162	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1163	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1164	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1165	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1166	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1167	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1168	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1169	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1170	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1171	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1172	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1173	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1174	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1175	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1176	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1177	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1178	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1179	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1180	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1181	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1182	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1183	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1184	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
1185	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
1186	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1187	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1188	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1189	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1190	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1191	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1192	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1193	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1194	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1195	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1196	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1197	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1198	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1199	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1200	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1201	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1202	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1203	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1204	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1205	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1206	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1207	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1208	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1209	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1210	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1211	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1212	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1213	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1214	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1215	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1216	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1217	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1218	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1219	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1220	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1221	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1222	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1223	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1224	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1225	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1226	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1227	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1228	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1229	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1230	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1231	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1232	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1233	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1234	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1235	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1236	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1237	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1238	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1239	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1240	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1241	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1242	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1243	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1244	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1245	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1246	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1247	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1248	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1249	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1250	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1251	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1252	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1253	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1254	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1255	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1256	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1257	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1258	we8105desk	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
1259	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1260	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1261	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1262	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1263	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1264	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1265	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1266	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1267	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1268	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1269	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1270	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1271	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1272	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1273	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1274	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1275	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1276	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1277	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1278	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1279	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1280	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1281	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1282	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1283	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1284	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1285	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1286	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1287	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1288	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1289	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1290	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1291	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1292	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1293	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1294	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1295	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1296	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1297	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1298	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1299	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1300	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1301	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1302	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1303	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1304	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1305	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1306	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1307	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1308	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1309	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1310	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1311	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1312	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1313	we8105desk	C:\Windows\System32\SearchFilterHost.exe	WinEventLog:Security	4688
1314	we8105desk	C:\Windows\System32\SearchProtocolHost.exe	WinEventLog:Security	4688
1315	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1316	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1317	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1318	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1319	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1320	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1321	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1322	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1323	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1324	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1325	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1326	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1327	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1328	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1329	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1330	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1331	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1332	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1333	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1334	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1335	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1336	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1337	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1338	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1339	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1340	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1341	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1342	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1343	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1344	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1345	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1346	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1347	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1348	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1349	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1350	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1351	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1352	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1353	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1354	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1355	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1356	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1357	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1358	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1359	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1360	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1361	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1362	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1363	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1364	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1365	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1366	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1367	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1368	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1369	we8105desk	C:\Windows\System32\PING.EXE	WinEventLog:Security	4688
1370	we8105desk	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
1371	we8105desk	C:\Windows\System32\taskkill.exe	WinEventLog:Security	4688
1372	we8105desk	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
1373	we8105desk	C:\Windows\System32\cmd.exe	WinEventLog:Security	4688
1374	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
1375	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
1376	we8105desk	C:\Windows\SysWOW64\dllhost.exe	WinEventLog:Security	4688
1377	we8105desk	C:\Windows\System32\SearchProtocolHost.exe	WinEventLog:Security	4688
1378	we8105desk	C:\Windows\System32\wscript.exe	WinEventLog:Security	4688
1379	we8105desk	C:\Windows\System32\dllhost.exe	WinEventLog:Security	4688
1380	we8105desk	C:\Program Files (x86)\Internet Explorer\iexplore.exe	WinEventLog:Security	4688
1381	we8105desk	C:\Windows\System32\notepad.exe	WinEventLog:Security	4688
1382	we8105desk	C:\Program Files (x86)\Internet Explorer\iexplore.exe	WinEventLog:Security	4688
1383	we8105desk	C:\Program Files (x86)\Internet Explorer\iexplore.exe	WinEventLog:Security	4688
1384	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1385	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1386	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1387	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1388	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1389	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1390	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1391	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1392	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1393	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1394	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1395	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1396	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1397	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1398	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1399	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1400	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1401	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1402	we8105desk	C:\Windows\System32\SearchFilterHost.exe	WinEventLog:Security	4688
1403	we8105desk	C:\Windows\System32\SearchProtocolHost.exe	WinEventLog:Security	4688
1404	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1405	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1406	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1407	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1408	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1409	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1410	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1411	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1412	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1413	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1414	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1415	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1416	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1417	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1418	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1419	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1420	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1421	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1422	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1423	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1424	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1425	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1426	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1427	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1428	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1429	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1430	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1431	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1432	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1433	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1434	we8105desk	C:\Windows\System32\SearchFilterHost.exe	WinEventLog:Security	4688
1435	we8105desk	C:\Windows\System32\SearchProtocolHost.exe	WinEventLog:Security	4688
1436	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1437	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1438	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1439	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1440	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1441	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1442	we8105desk	C:\Windows\System32\dllhost.exe	WinEventLog:Security	4688
1443	we8105desk	C:\Windows\System32\dllhost.exe	WinEventLog:Security	4688
1444	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1445	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1446	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1447	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1448	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1449	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1450	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1451	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1452	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1453	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1454	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1455	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1456	we8105desk	C:\Windows\SysWOW64\dllhost.exe	WinEventLog:Security	4688
1457	we8105desk	C:\Windows\explorer.exe	WinEventLog:Security	4688
1458	we8105desk	C:\Windows\System32\taskhost.exe	WinEventLog:Security	4688
1459	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1460	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1461	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1462	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1463	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1464	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1465	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1466	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1467	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1468	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1469	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1470	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1471	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1472	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1473	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1474	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1475	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1476	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1477	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1478	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1479	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1480	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1481	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1482	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1483	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1484	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1485	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1486	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1487	we8105desk	C:\Windows\System32\SearchFilterHost.exe	WinEventLog:Security	4688
1488	we8105desk	C:\Windows\System32\SearchProtocolHost.exe	WinEventLog:Security	4688
1489	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1490	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1491	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1492	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1493	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1494	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1495	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1496	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1497	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1498	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1499	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1500	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1501	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1502	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1503	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1504	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1505	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1506	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1507	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1508	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1509	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1510	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1511	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1512	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1513	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1514	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1515	we8105desk	C:\Windows\System32\SearchFilterHost.exe	WinEventLog:Security	4688
1516	we8105desk	C:\Windows\System32\SearchProtocolHost.exe	WinEventLog:Security	4688
1517	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1518	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1519	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1520	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1521	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1522	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1523	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1524	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1525	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1526	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1527	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1528	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1529	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1530	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1531	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1532	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1533	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1534	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1535	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1536	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1537	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1538	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1539	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1540	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1541	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1542	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1543	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1544	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1545	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1546	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1547	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1548	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1549	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1550	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1551	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1552	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1553	we8105desk	C:\Windows\System32\SearchFilterHost.exe	WinEventLog:Security	4688
1554	we8105desk	C:\Windows\System32\SearchProtocolHost.exe	WinEventLog:Security	4688
1555	we8105desk	C:\Windows\System32\dllhost.exe	WinEventLog:Security	4688
1556	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1557	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1558	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1559	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1560	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1561	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1562	we8105desk	C:\Windows\System32\dllhost.exe	WinEventLog:Security	4688
1563	we8105desk	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
1564	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1565	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1566	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1567	we8105desk	C:\Windows\System32\dllhost.exe	WinEventLog:Security	4688
1568	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1569	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1570	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1571	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1572	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1573	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1574	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1575	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1576	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1577	we8105desk	C:\Windows\System32\dllhost.exe	WinEventLog:Security	4688
1578	we8105desk	C:\Windows\System32\dllhost.exe	WinEventLog:Security	4688
1579	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1580	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1581	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1582	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1583	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1584	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1585	we8105desk	C:\Windows\SysWOW64\dllhost.exe	WinEventLog:Security	4688
1586	we8105desk	C:\Windows\System32\dllhost.exe	WinEventLog:Security	4688
1587	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
1588	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
1589	we8105desk	C:\Windows\System32\dllhost.exe	WinEventLog:Security	4688
1590	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1591	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1592	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1593	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1594	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1595	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1596	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1597	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1598	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1599	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1600	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1601	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1602	we8105desk	C:\Windows\System32\dllhost.exe	WinEventLog:Security	4688
1603	we8105desk	C:\Windows\SysWOW64\dllhost.exe	WinEventLog:Security	4688
1604	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1605	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1606	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1607	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1608	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1609	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1610	we8105desk	C:\Windows\System32\dllhost.exe	WinEventLog:Security	4688
1611	we8105desk	C:\Windows\SysWOW64\dllhost.exe	WinEventLog:Security	4688
1612	we8105desk	C:\Windows\System32\SearchFilterHost.exe	WinEventLog:Security	4688
1613	we8105desk	C:\Windows\System32\SearchProtocolHost.exe	WinEventLog:Security	4688
1614	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1615	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1616	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1617	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1618	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1619	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1620	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1621	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1622	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1623	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1624	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1625	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1626	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1627	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1628	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1629	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1630	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1631	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1632	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1633	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1634	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1635	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1636	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1637	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1638	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1639	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1640	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1641	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1642	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1643	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1644	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1645	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1646	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1647	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1648	we8105desk	C:\Windows\System32\audiodg.exe	WinEventLog:Security	4688
1649	we8105desk	C:\Windows\System32\rundll32.exe	WinEventLog:Security	4688
1650	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1651	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1652	we8105desk	C:\Windows\System32\DeviceDisplayObjectProvider.exe	WinEventLog:Security	4688
1653	we8105desk	C:\Windows\System32\DeviceDisplayObjectProvider.exe	WinEventLog:Security	4688
1654	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1655	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1656	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1657	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1658	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1659	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1660	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1661	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1662	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1663	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1664	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1665	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1666	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1667	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1668	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1669	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1670	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1671	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1672	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1673	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1674	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1675	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1676	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1677	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1678	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1679	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1680	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1681	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1682	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1683	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1684	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1685	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1686	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1687	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1688	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1689	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1690	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1691	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1692	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1693	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1694	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1695	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1696	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1697	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1698	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1699	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1700	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1701	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1702	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1703	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1704	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1705	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1706	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1707	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1708	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1709	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1710	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1711	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1712	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1713	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1714	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1715	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1716	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1717	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1718	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1719	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1720	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1721	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1722	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1723	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1724	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1725	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1726	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1727	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1728	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1729	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1730	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1731	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1732	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1733	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1734	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1735	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1736	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1737	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1738	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1739	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1740	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1741	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1742	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1743	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1744	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1745	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1746	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1747	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1748	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1749	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1750	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1751	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1752	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1753	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1754	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1755	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1756	we8105desk	C:\Windows\System32\SearchFilterHost.exe	WinEventLog:Security	4688
1757	we8105desk	C:\Windows\System32\SearchProtocolHost.exe	WinEventLog:Security	4688
1758	we8105desk	C:\Program Files (x86)\Internet Explorer\iexplore.exe	WinEventLog:Security	4688
1759	we8105desk	C:\Program Files (x86)\Internet Explorer\iexplore.exe	WinEventLog:Security	4688
1760	we8105desk	C:\Windows\System32\rundll32.exe	WinEventLog:Security	4688
1761	we8105desk	C:\Windows\System32\dllhost.exe	WinEventLog:Security	4688
1762	we8105desk	C:\Windows\SysWOW64\dllhost.exe	WinEventLog:Security	4688
1763	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1764	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1765	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1766	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1767	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1768	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1769	we8105desk	C:\Windows\SysWOW64\dllhost.exe	WinEventLog:Security	4688
1770	we8105desk	C:\Windows\explorer.exe	WinEventLog:Security	4688
1771	we8105desk	C:\Windows\System32\audiodg.exe	WinEventLog:Security	4688
1772	we8105desk	C:\Windows\SysWOW64\dllhost.exe	WinEventLog:Security	4688
1773	we8105desk	C:\Windows\explorer.exe	WinEventLog:Security	4688
1774	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1775	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1776	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1777	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1778	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1779	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1780	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1781	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1782	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1783	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1784	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1785	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1786	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1787	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1788	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1789	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1790	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1791	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1792	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
1793	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
1794	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1795	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1796	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1797	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1798	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1799	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1800	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1801	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1802	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1803	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1804	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1805	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1806	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1807	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1808	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1809	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1810	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1811	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1812	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1813	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1814	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1815	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1816	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1817	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1818	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1819	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1820	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1821	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1822	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1823	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1824	we8105desk	C:\Windows\System32\slui.exe	WinEventLog:Security	4688
1825	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1826	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1827	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1828	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1829	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1830	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1831	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1832	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1833	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1834	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1835	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1836	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1837	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1838	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1839	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1840	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1841	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1842	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1843	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1844	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1845	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1846	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1847	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1848	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1849	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1850	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1851	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1852	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1853	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1854	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1855	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1856	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1857	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1858	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1859	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1860	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1861	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1862	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1863	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1864	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1865	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1866	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1867	we8105desk	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
1868	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1869	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1870	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1871	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1872	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1873	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1874	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1875	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1876	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1877	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1878	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1879	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1880	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1881	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1882	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1883	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1884	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1885	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1886	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1887	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1888	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1889	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1890	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1891	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1892	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1893	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1894	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1895	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1896	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1897	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1898	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1899	we8105desk	C:\Windows\System32\SearchFilterHost.exe	WinEventLog:Security	4688
1900	we8105desk	C:\Windows\System32\SearchProtocolHost.exe	WinEventLog:Security	4688
1901	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1902	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1903	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1904	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1905	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1906	we8105desk	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
1907	we8105desk	C:\Windows\System32\bcdedit.exe	WinEventLog:Security	4688
1908	we8105desk	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
1909	we8105desk	C:\Windows\System32\bcdedit.exe	WinEventLog:Security	4688
1910	we8105desk	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
1911	we8105desk	C:\Windows\System32\wbem\WMIC.exe	WinEventLog:Security	4688
1912	we8105desk	C:\Windows\System32\svchost.exe	WinEventLog:Security	4688
1913	we8105desk	C:\Windows\System32\VSSVC.exe	WinEventLog:Security	4688
1914	we8105desk	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
1915	we8105desk	C:\Windows\System32\vssadmin.exe	WinEventLog:Security	4688
1916	we8105desk	C:\Windows\SysWOW64\dllhost.exe	WinEventLog:Security	4688
1917	we8105desk	C:\Windows\System32\dllhost.exe	WinEventLog:Security	4688
1918	we8105desk	C:\Windows\System32\consent.exe	WinEventLog:Security	4688
1919	we8105desk	C:\Users\bob.smith.WAYNECORPINC\AppData\Roaming\{35ACA89F-933F-6A5D-2776-A3589FB99832}\osk.exe	WinEventLog:Security	4688
1920	we8105desk	C:\Users\bob.smith.WAYNECORPINC\AppData\Roaming\{35ACA89F-933F-6A5D-2776-A3589FB99832}\osk.exe	WinEventLog:Security	4688
1921	we8105desk	C:\Windows\SysWOW64\QqJXZrBKCk72XzRgZs\AdapterTroubleshooter.exe	WinEventLog:Security	4688
1922	we8105desk	C:\Windows\System32\dllhost.exe	WinEventLog:Security	4688
1923	we8105desk	C:\Windows\System32\consent.exe	WinEventLog:Security	4688
1924	we8105desk	C:\Windows\SysWOW64\QqJXZrBKCk72XzRgZs\AdapterTroubleshooter.exe	WinEventLog:Security	4688
1925	we8105desk	C:\Windows\System32\consent.exe	WinEventLog:Security	4688
1926	we8105desk	C:\Windows\System32\consent.exe	WinEventLog:Security	4688
1927	we8105desk	C:\Windows\SysWOW64\dllhost.exe	WinEventLog:Security	4688
1928	we8105desk	C:\Windows\System32\dllhost.exe	WinEventLog:Security	4688
1929	we8105desk	C:\Windows\System32\consent.exe	WinEventLog:Security	4688
1930	we8105desk	C:\Windows\SysWOW64\explorer.exe	WinEventLog:Security	4688
1931	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1932	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1933	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1934	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1935	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1936	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1937	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1938	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1939	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1940	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1941	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1942	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1943	we8105desk	C:\Users\bob.smith.WAYNECORPINC\AppData\Roaming\{35ACA89F-933F-6A5D-2776-A3589FB99832}\osk.exe	WinEventLog:Security	4688
1944	we8105desk	C:\Windows\SysWOW64\PING.EXE	WinEventLog:Security	4688
1945	we8105desk	C:\Windows\SysWOW64\taskkill.exe	WinEventLog:Security	4688
1946	we8105desk	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
1947	we8105desk	C:\Windows\SysWOW64\cmd.exe	WinEventLog:Security	4688
1948	we8105desk	C:\Users\bob.smith.WAYNECORPINC\AppData\Roaming\{35ACA89F-933F-6A5D-2776-A3589FB99832}\osk.exe	WinEventLog:Security	4688
1949	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1950	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1951	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1952	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1953	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1954	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1955	we8105desk	C:\Users\bob.smith.WAYNECORPINC\AppData\Roaming\121214.tmp	WinEventLog:Security	4688
1956	we8105desk	C:\Users\bob.smith.WAYNECORPINC\AppData\Roaming\121214.tmp	WinEventLog:Security	4688
1957	we8105desk	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
1958	we8105desk	C:\Windows\SysWOW64\cmd.exe	WinEventLog:Security	4688
1959	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1960	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1961	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1962	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1963	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1964	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1965	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1966	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1967	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1968	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1969	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1970	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1971	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1972	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1973	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1974	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1975	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1976	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1977	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1978	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1979	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1980	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1981	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1982	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1983	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1984	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1985	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1986	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1987	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1988	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1989	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1990	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1991	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1992	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1993	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
1994	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1995	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
1996	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
1997	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
1998	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
1999	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2000	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2001	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2002	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2003	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2004	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2005	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2006	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2007	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2008	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2009	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2010	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2011	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2012	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2013	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
2014	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
2015	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2016	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2017	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2018	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2019	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2020	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2021	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2022	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2023	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2024	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2025	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2026	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2027	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2028	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2029	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2030	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2031	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2032	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2033	we8105desk	C:\Windows\SysWOW64\dllhost.exe	WinEventLog:Security	4688
2034	we8105desk	C:\Windows\SysWOW64\dllhost.exe	WinEventLog:Security	4688
2035	we8105desk	C:\Windows\System32\dllhost.exe	WinEventLog:Security	4688
2036	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2037	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2038	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2039	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2040	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2041	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2042	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2043	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2044	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2045	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2046	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2047	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2048	we8105desk	C:\Windows\SysWOW64\dllhost.exe	WinEventLog:Security	4688
2049	we8105desk	C:\Windows\explorer.exe	WinEventLog:Security	4688
2050	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2051	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2052	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2053	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2054	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2055	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2056	we8105desk	C:\Windows\splwow64.exe	WinEventLog:Security	4688
2057	we8105desk	C:\Windows\SysWOW64\wscript.exe	WinEventLog:Security	4688
2058	we8105desk	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
2059	we8105desk	C:\Windows\SysWOW64\cmd.exe	WinEventLog:Security	4688
2060	we8105desk	C:\Windows\SysWOW64\dllhost.exe	WinEventLog:Security	4688
2061	we8105desk	C:\Windows\System32\wbem\WMIADAP.exe	WinEventLog:Security	4688
2062	we8105desk	C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE	WinEventLog:Security	4688
2063	we8105desk	C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE	WinEventLog:Security	4688
2064	we8105desk	C:\Windows\System32\dllhost.exe	WinEventLog:Security	4688
2065	we8105desk	C:\Windows\System32\dllhost.exe	WinEventLog:Security	4688
2066	we8105desk	C:\Windows\SysWOW64\dllhost.exe	WinEventLog:Security	4688
2067	we8105desk	C:\Windows\explorer.exe	WinEventLog:Security	4688
2068	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2069	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2070	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2071	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2072	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2073	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2074	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2075	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2076	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2077	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2078	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2079	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2080	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2081	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2082	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2083	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2084	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2085	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2086	we8105desk	C:\Windows\System32\audiodg.exe	WinEventLog:Security	4688
2087	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2088	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2089	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2090	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2091	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2092	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2093	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2094	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2095	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2096	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2097	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2098	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2099	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2100	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2101	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2102	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2103	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2104	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2105	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2106	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2107	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2108	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2109	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2110	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2111	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2112	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2113	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2114	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2115	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2116	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2117	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2118	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2119	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2120	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2121	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2122	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2123	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2124	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2125	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2126	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2127	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2128	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2129	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2130	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2131	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2132	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2133	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2134	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2135	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2136	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2137	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2138	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2139	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2140	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2141	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2142	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2143	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2144	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2145	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2146	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2147	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2148	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2149	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2150	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2151	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2152	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2153	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2154	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2155	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2156	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2157	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2158	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2159	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2160	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2161	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2162	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2163	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2164	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2165	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2166	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2167	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2168	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2169	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2170	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2171	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2172	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2173	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2174	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2175	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2176	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2177	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2178	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2179	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2180	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2181	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2182	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2183	we9041srv	C:\Windows\System32\dwm.exe	WinEventLog:Security	4688
2184	we9041srv	C:\Windows\System32\LogonUI.exe	WinEventLog:Security	4688
2185	we9041srv	C:\Windows\System32\winlogon.exe	WinEventLog:Security	4688
2186	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2187	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2188	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2189	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2190	we9041srv	C:\Windows\System32\csrss.exe	WinEventLog:Security	4688
2191	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2192	we9041srv	C:\Windows\System32\smss.exe	WinEventLog:Security	4688
2193	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2194	we8105desk	C:\Windows\System32\choice.exe	WinEventLog:Security	4688
2195	we8105desk	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
2196	we8105desk	C:\Windows\System32\cmd.exe	WinEventLog:Security	4688
2197	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2198	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2199	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2200	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2201	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2202	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2203	we1149srv	C:\Windows\System32\dwm.exe	WinEventLog:Security	4688
2204	we1149srv	C:\Windows\System32\LogonUI.exe	WinEventLog:Security	4688
2205	we1149srv	C:\Windows\System32\winlogon.exe	WinEventLog:Security	4688
2206	we1149srv	C:\Windows\System32\csrss.exe	WinEventLog:Security	4688
2207	we1149srv	C:\Windows\System32\smss.exe	WinEventLog:Security	4688
2208	we8105desk	C:\Windows\System32\SearchFilterHost.exe	WinEventLog:Security	4688
2209	we8105desk	C:\Windows\tenable_mw_scan_142a90001fb65e0beb1751cc8c63edd0.exe	WinEventLog:Security	4688
2210	we8105desk	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
2211	we8105desk	C:\Windows\System32\sc.exe	WinEventLog:Security	4688
2212	we9041srv	C:\Windows\System32\choice.exe	WinEventLog:Security	4688
2213	we9041srv	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
2214	we9041srv	C:\Windows\System32\cmd.exe	WinEventLog:Security	4688
2215	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2216	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2217	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2218	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2219	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2220	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2221	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2222	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2223	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2224	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2225	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2226	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2227	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2228	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2229	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2230	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2231	we8105desk	C:\Windows\System32\schtasks.exe	WinEventLog:Security	4688
2232	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2233	we8105desk	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
2234	we8105desk	C:\Windows\System32\cmd.exe	WinEventLog:Security	4688
2235	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2236	we9041srv	C:\Windows\tenable_mw_scan_142a90001fb65e0beb1751cc8c63edd0.exe	WinEventLog:Security	4688
2237	we9041srv	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
2238	we9041srv	C:\Windows\System32\sc.exe	WinEventLog:Security	4688
2239	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
2240	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
2241	we9041srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
2242	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2243	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2244	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2245	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2246	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2247	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2248	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2249	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2250	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2251	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2252	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2253	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2254	we8105desk	C:\Windows\System32\netsh.exe	WinEventLog:Security	4688
2255	we8105desk	C:\Windows\System32\cmd.exe	WinEventLog:Security	4688
2256	we8105desk	C:\Windows\System32\netsh.exe	WinEventLog:Security	4688
2257	we8105desk	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
2258	we8105desk	C:\Windows\System32\cmd.exe	WinEventLog:Security	4688
2259	we9041srv	C:\Windows\System32\schtasks.exe	WinEventLog:Security	4688
2260	we9041srv	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
2261	we9041srv	C:\Windows\System32\cmd.exe	WinEventLog:Security	4688
2262	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2263	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2264	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2265	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2266	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2267	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2268	we8105desk	C:\Windows\System32\tasklist.exe	WinEventLog:Security	4688
2269	we8105desk	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
2270	we8105desk	C:\Windows\System32\cmd.exe	WinEventLog:Security	4688
2271	we9041srv	C:\Windows\System32\svchost.exe	WinEventLog:Security	4688
2272	we9041srv	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	WinEventLog:Security	4688
2273	we9041srv	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
2274	we9041srv	C:\Windows\System32\cmd.exe	WinEventLog:Security	4688
2275	we9041srv	C:\Windows\System32\netsh.exe	WinEventLog:Security	4688
2276	we9041srv	C:\Windows\System32\cmd.exe	WinEventLog:Security	4688
2277	we9041srv	C:\Windows\System32\netsh.exe	WinEventLog:Security	4688
2278	we9041srv	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
2279	we9041srv	C:\Windows\System32\cmd.exe	WinEventLog:Security	4688
2280	we8105desk	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
2281	we8105desk	C:\Windows\System32\svchost.exe	WinEventLog:Security	4688
2282	we8105desk	C:\Windows\System32\netsh.exe	WinEventLog:Security	4688
2283	we8105desk	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
2284	we8105desk	C:\Windows\System32\cmd.exe	WinEventLog:Security	4688
2285	we8105desk	C:\Windows\servicing\TrustedInstaller.exe	WinEventLog:Security	4688
2286	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2287	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2288	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2289	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2290	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2291	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2292	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2293	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2294	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2295	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2296	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2297	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2298	we8105desk	C:\Windows\System32\NETSTAT.EXE	WinEventLog:Security	4688
2299	we8105desk	C:\Windows\System32\SearchFilterHost.exe	WinEventLog:Security	4688
2300	we8105desk	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
2301	we8105desk	C:\Windows\System32\SearchProtocolHost.exe	WinEventLog:Security	4688
2302	we8105desk	C:\Windows\System32\cmd.exe	WinEventLog:Security	4688
2303	we8105desk	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
2304	we1149srv	C:\Windows\System32\inetsrv\w3wp.exe	WinEventLog:Security	4688
2305	we9041srv	C:\Windows\System32\tasklist.exe	WinEventLog:Security	4688
2306	we9041srv	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
2307	we9041srv	C:\Windows\System32\cmd.exe	WinEventLog:Security	4688
2308	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2309	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2310	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2311	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2312	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2313	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2314	we9041srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
2315	we9041srv	C:\Windows\System32\netsh.exe	WinEventLog:Security	4688
2316	we9041srv	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
2317	we9041srv	C:\Windows\System32\cmd.exe	WinEventLog:Security	4688
2318	we9041srv	C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.16384_none_fa1dc1539b4180d8\TiWorker.exe	WinEventLog:Security	4688
2319	we9041srv	C:\Windows\servicing\TrustedInstaller.exe	WinEventLog:Security	4688
2320	we9041srv	C:\Windows\System32\sppsvc.exe	WinEventLog:Security	4688
2321	we9041srv	C:\Windows\System32\NETSTAT.EXE	WinEventLog:Security	4688
2322	we9041srv	C:\Windows\System32\conhost.exe	WinEventLog:Security	4688
2323	we9041srv	C:\Windows\System32\cmd.exe	WinEventLog:Security	4688
2324	we9041srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
2325	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2326	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2327	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2328	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2329	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2330	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2331	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2332	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2333	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2334	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2335	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2336	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2337	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2338	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2339	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2340	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2341	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2342	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2343	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2344	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2345	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2346	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2347	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2348	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2349	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2350	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2351	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2352	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2353	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2354	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2355	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2356	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2357	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2358	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2359	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2360	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2361	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2362	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2363	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2364	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2365	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2366	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2367	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2368	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2369	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2370	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2371	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2372	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2373	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2374	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2375	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2376	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2377	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2378	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2379	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2380	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2381	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2382	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2383	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2384	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2385	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2386	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2387	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2388	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2389	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2390	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2391	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2392	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2393	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2394	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2395	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2396	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2397	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2398	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2399	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2400	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2401	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2402	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2403	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2404	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2405	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2406	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2407	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2408	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2409	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2410	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2411	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2412	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2413	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2414	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2415	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2416	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2417	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2418	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2419	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2420	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2421	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2422	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2423	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2424	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2425	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2426	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2427	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2428	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2429	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2430	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2431	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2432	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2433	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2434	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2435	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2436	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2437	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2438	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2439	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2440	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2441	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2442	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2443	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2444	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2445	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2446	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2447	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2448	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2449	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2450	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2451	we9041srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
2452	we9041srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
2453	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2454	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2455	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2456	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2457	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2458	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2459	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2460	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2461	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2462	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2463	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2464	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2465	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2466	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2467	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2468	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2469	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2470	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2471	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
2472	we1149srv	C:\Windows\System32\wbem\WmiPrvSE.exe	WinEventLog:Security	4688
2473	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2474	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2475	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2476	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2477	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2478	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2479	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2480	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2481	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2482	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2483	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2484	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2485	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2486	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2487	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2488	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2489	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2490	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2491	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2492	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2493	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2494	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2495	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2496	we9041srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2497	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2498	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2499	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2500	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2501	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2502	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2503	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2504	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688
2505	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2506	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2507	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2508	we1149srv	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2509	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-MonitorNoHandle.exe	WinEventLog:Security	4688
2510	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-netmon.exe	WinEventLog:Security	4688
2511	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2512	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-winprintmon.exe	WinEventLog:Security	4688
2513	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-powershell.exe	WinEventLog:Security	4688
2514	we8105desk	C:\Program Files\SplunkUniversalForwarder\bin\splunk-admon.exe	WinEventLog:Security	4688

257 KiB Raw Blame History

257 KiB

Raw Blame History