Id	EventId	EventType	TimeGenerated (UTC)	Channel	ChannelKey	DeviceId	DeviceName	Computer	CategoryUid	CategoryName	ClassUid	ClassName	ActivityId	ActivityName	TypeUid	TypeName	SeverityId	Severity	IsAlert	IsBlocked	BlockReason	StatusCode	FileName	FilePath	FileHashSha256	FileHashSha1	FileSize	FileDescription	ProductName	FileVersion	InternalName	OriginalFileName	IsSigned	SignatureStatus	SignerType	Publisher	IssuerName	IssuerTbsHash	PublisherTbsHash	Sha256Authenticode	Sha1Authenticode	EkuOids	RequestedSigningLevel	ValidatedSigningLevel	PackageFamilyName	PackageFullName	ProcessName	ProcessId	ProcessGuid	Commandline	ParentProcessName	ParentProcessId	ParentProcessGuid	ParentCommandline	CorrelationActivityId	UserName	UserSid	LogonType	LogonTypeName	TargetUserName	TargetDomainName	TargetLogonId	PolicyId	PolicyName	PolicyHash	NetworkProtocol	NetworkDirection	SourceIp	SourcePort	DestIp	DestPort	SourceComputerName	ServiceName	ServiceType	ServiceStartType	ServiceAccount	ThreatName	ThreatId	ThreatSeverity	ThreatStatus	TaskName	TaskAction	ScriptPath	ScriptBlockId	ScriptBlockText	ObjectName	ObjectType	Operation	TargetObject	AccessMask	PrivilegeList	GroupName	GroupDomain	TeamId	SigningId	CDHash	IsPlatformBinary	FileEventType	FileEventPath	IsProcessed	ProcessedAt (UTC)
41065642-843b-4d7d-aa59-228dba424ae2	3033	Block	08:57.0	Microsoft-Windows-CodeIntegrity/Operational	code_integrity	f9f55d92-451d-4115-b37b-35976929e0ff	MF-D25401.MAHFSL.COM	MF-D25401.MAHFSL.COM	1	System Activity	1005	Module Activity	1	Load	100501	Module Activity: Load	4	High	FALSE	TRUE		3236495362	QualysAgent.exe	c:\program files\qualys\qualysagent\qualysagent.exe									FALSE														c:\windows\system32\services.exe	1220			C:\Windows\System32\services.exe				2aad7e89-3b68-0008-7b82-b12a683bdd01	NT AUTHORITY\SYSTEM	S-1-5-18																																											FALSE	
e127235a-b3a3-431c-a72d-d7a6535d61c1	3077	Block	08:57.0	Microsoft-Windows-CodeIntegrity/Operational	code_integrity	f9f55d92-451d-4115-b37b-35976929e0ff	MF-D25401.MAHFSL.COM	MF-D25401.MAHFSL.COM	1	System Activity	1007	Process Activity	1	Launch	100701	Process Activity: Launch	4	High	FALSE	TRUE		0xc0e90002	QualysAgent.exe	c:\program files\qualys\qualysagent\qualysagent.exe	E6B56B9E7E2F35DCC83E6DD99D072A2B50D8CB1F3DDA4BA10D6A13A5E0098531	8F574B97B0BBD991A55F56A9D19D045C8E9017E2		Qualys Cloud Agent	QualysAgent	6.2.5.4	QualysAgent.exe	QualysAgent.exe	TRUE		Embedded	Qualys, Inc.	DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1			6F96EBA6D4CA0138CDBE552788C89F3DB1C840F1A8EB9738EAA960EE78D2B01E	8EBAF6B8B0F68CE0E1394318EB64BEC2F7111BA3	01082B06010505070303	2	1			c:\windows\system32\services.exe	1220			C:\Windows\System32\services.exe				2aad7e89-3b68-0008-7b82-b12a683bdd01	NT AUTHORITY\SYSTEM	S-1-5-18						{07d5f004-4f0c-4d87-84ff-1aaa50b0446e}	MMFSL-P																																				FALSE	
efaf5e24-e7fb-4849-9900-66396c08dab9	3033	Block	53:51.0	Microsoft-Windows-CodeIntegrity/Operational	code_integrity	f9f55d92-451d-4115-b37b-35976929e0ff	MF-D25401.MAHFSL.COM	MF-D25401.MAHFSL.COM	1	System Activity	1005	Module Activity	1	Load	100501	Module Activity: Load	4	High	FALSE	TRUE		3236495362	ucrtbase.dll	c:\program files\dotnet\shared\microsoft.netcore.app\6.0.36\ucrtbase.dll									FALSE														c:\program files\dell\supportassistagent\bin\supportassistagent.exe	24040			C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe				2aad7e89-3b68-0004-604c-ae2a683bdd01	NT AUTHORITY\SYSTEM	S-1-5-18																																											FALSE	
2be60458-267a-4a36-8a61-e57e34dccea8	3077	Block	53:51.0	Microsoft-Windows-CodeIntegrity/Operational	code_integrity	f9f55d92-451d-4115-b37b-35976929e0ff	MF-D25401.MAHFSL.COM	MF-D25401.MAHFSL.COM	1	System Activity	1007	Process Activity	1	Launch	100701	Process Activity: Launch	4	High	FALSE	TRUE		0xc0e90002	ucrtbase.dll	c:\program files\dotnet\shared\microsoft.netcore.app\6.0.36\ucrtbase.dll	C04DAEBA7E7C4B711D33993AB4C51A2E087F98F4211AEA0DCB3A216656BA0AB7	EBEE2827B5CB153CBBB51C9718DA1549FA80FC5C		Microsoft® C Runtime Library	Microsoft® Windows® Operating System	10.0.22000.194	ucrtbase.dll	ucrtbase.dll	FALSE							980D64FC58751D39A6D54B15236D023B51ED58CAE62EA33F4F46292E86986741	51814DF0BA4BA671795941C00078B71A954D1E73		2	1			c:\program files\dell\supportassistagent\bin\supportassistagent.exe	24040			C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe				2aad7e89-3b68-0004-604c-ae2a683bdd01	NT AUTHORITY\SYSTEM	S-1-5-18						{07d5f004-4f0c-4d87-84ff-1aaa50b0446e}	MMFSL-P																																				FALSE	
532f05d7-7e28-4504-bc98-9cc1ec0d3e4b	3077	Block	53:34.0	Microsoft-Windows-CodeIntegrity/Operational	code_integrity	f9f55d92-451d-4115-b37b-35976929e0ff	MF-D25401.MAHFSL.COM	MF-D25401.MAHFSL.COM	1	System Activity	1007	Process Activity	1	Launch	100701	Process Activity: Launch	4	High	FALSE	TRUE		0xc0e90002	QualysAgent.exe	c:\program files\qualys\qualysagent\qualysagent.exe	E6B56B9E7E2F35DCC83E6DD99D072A2B50D8CB1F3DDA4BA10D6A13A5E0098531	8F574B97B0BBD991A55F56A9D19D045C8E9017E2		Qualys Cloud Agent	QualysAgent	6.2.5.4	QualysAgent.exe	QualysAgent.exe	FALSE							6F96EBA6D4CA0138CDBE552788C89F3DB1C840F1A8EB9738EAA960EE78D2B01E	8EBAF6B8B0F68CE0E1394318EB64BEC2F7111BA3		2	1			c:\windows\system32\services.exe	1220			C:\Windows\System32\services.exe				2aad7e89-3b68-0005-d62c-ae2a683bdd01	NT AUTHORITY\SYSTEM	S-1-5-18						{07d5f004-4f0c-4d87-84ff-1aaa50b0446e}	MMFSL-P																																				FALSE	
b539c7e1-5e66-4768-8c2f-cfaee6459a6b	3033	Block	53:34.0	Microsoft-Windows-CodeIntegrity/Operational	code_integrity	f9f55d92-451d-4115-b37b-35976929e0ff	MF-D25401.MAHFSL.COM	MF-D25401.MAHFSL.COM	1	System Activity	1005	Module Activity	1	Load	100501	Module Activity: Load	4	High	FALSE	TRUE		3236495362	QualysAgent.exe	c:\program files\qualys\qualysagent\qualysagent.exe									FALSE														c:\windows\system32\services.exe	1220			C:\Windows\System32\services.exe				2aad7e89-3b68-0005-d62c-ae2a683bdd01	NT AUTHORITY\SYSTEM	S-1-5-18																																											FALSE	
7450d832-bcd7-44ce-bcb4-614e18c350e6	3077	Block	53:33.0	Microsoft-Windows-CodeIntegrity/Operational	code_integrity	f9f55d92-451d-4115-b37b-35976929e0ff	MF-D25401.MAHFSL.COM	MF-D25401.MAHFSL.COM	1	System Activity	1007	Process Activity	1	Launch	100701	Process Activity: Launch	4	High	FALSE	TRUE		0xc0e90002	ServiceShell.exe	c:\program files (x86)\dell\updateservice\serviceshell.exe	CF8EB7211E07C5FA59778F333060AD9227B5B3FEC2E46358B2BE369E52E28F89	0C3928D1A253D3B586ECBA017D4B2190FC9B3522		ServiceShell	ServiceShell	5.1.0.107	ServiceShell.exe	ServiceShell.exe	FALSE							C5BE9FDBF9E9EA263FA09BB917E2415F56D90E638220A92B1F0E9DB92440797B	DAF51CB1A3F9478207C19C8B0027430A2A372E45		2	1			c:\windows\system32\services.exe	1220			C:\Windows\System32\services.exe				2aad7e89-3b68-0000-f141-ae2a683bdd01	NT AUTHORITY\SYSTEM	S-1-5-18						{07d5f004-4f0c-4d87-84ff-1aaa50b0446e}	MMFSL-P																																				FALSE	
b0bde628-f7f6-4949-944d-90398092f600	3033	Block	53:33.0	Microsoft-Windows-CodeIntegrity/Operational	code_integrity	f9f55d92-451d-4115-b37b-35976929e0ff	MF-D25401.MAHFSL.COM	MF-D25401.MAHFSL.COM	1	System Activity	1005	Module Activity	1	Load	100501	Module Activity: Load	4	High	FALSE	TRUE		3236495362	ServiceShell.exe	c:\program files (x86)\dell\updateservice\serviceshell.exe									FALSE														c:\windows\system32\services.exe	1220			C:\Windows\System32\services.exe				2aad7e89-3b68-0000-f141-ae2a683bdd01	NT AUTHORITY\SYSTEM	S-1-5-18																																											FALSE	
9e0ed86f-1b18-4072-b4f8-2ffb267dd6a5	3077	Block	52:42.0	Microsoft-Windows-CodeIntegrity/Operational	code_integrity	f9f55d92-451d-4115-b37b-35976929e0ff	MF-D25401.MAHFSL.COM	MF-D25401.MAHFSL.COM	1	System Activity	1007	Process Activity	1	Launch	100701	Process Activity: Launch	4	High	FALSE	TRUE		0xc0e90002	Dell.DCF.UA.Bradbury.API.SubAgent.exe	c:\program files (x86)\dell\updateservice\dcf\dell.dcf.ua.bradbury.api.subagent.exe	198449B4B07DDE95671B81A8D07A6ED1A2965E80D1B7E4DD7EFD217A73C63148	A60609DECDEB4DEEFB0745B033AF2CB76C3FA9F7				5.1.0.107	Dell.DCF.UA.Bradbury.API.SubAgent.exe	Dell.DCF.UA.Bradbury.API.SubAgent.exe	TRUE		Embedded	Dell Inc	Entrust Extended Validation Code Signing CA - EVCS2			7379D09E6D11C9296FB030C7BDE14AF7BBF65791EEABDE6B0B3859FDA71CF287	60BC53168270CA2F56E5E3BA7F88DB909A18651F	01082B06010505070303	2	1			c:\program files\dell\techhub\dell.techhub.exe	6452			C:\Program Files\Dell\TechHub\Dell.TechHub.exe				2aad7e89-3b68-000b-40c8-ad2a683bdd01	NT AUTHORITY\SYSTEM	S-1-5-18						{07d5f004-4f0c-4d87-84ff-1aaa50b0446e}	MMFSL-P																																				FALSE	
d04d37ae-a9f4-4553-a50a-7e6611efcea7	3033	Block	52:42.0	Microsoft-Windows-CodeIntegrity/Operational	code_integrity	f9f55d92-451d-4115-b37b-35976929e0ff	MF-D25401.MAHFSL.COM	MF-D25401.MAHFSL.COM	1	System Activity	1005	Module Activity	1	Load	100501	Module Activity: Load	4	High	FALSE	TRUE		3236495362	Dell.DCF.UA.Bradbury.API.SubAgent.exe	c:\program files (x86)\dell\updateservice\dcf\dell.dcf.ua.bradbury.api.subagent.exe									FALSE														c:\program files\dell\techhub\dell.techhub.exe	6452			C:\Program Files\Dell\TechHub\Dell.TechHub.exe				2aad7e89-3b68-000b-40c8-ad2a683bdd01	NT AUTHORITY\SYSTEM	S-1-5-18																																											FALSE	
bbecdf53-011f-46cc-b47e-84684754c0f1	3033	Block	51:08.0	Microsoft-Windows-CodeIntegrity/Operational	code_integrity	f9f55d92-451d-4115-b37b-35976929e0ff	MF-D25401.MAHFSL.COM	MF-D25401.MAHFSL.COM	1	System Activity	1005	Module Activity	1	Load	100501	Module Activity: Load	4	High	FALSE	TRUE		3236495362	NLog.dll	c:\program files (x86)\microsoft\microsoft search in bing\nlog.dll									FALSE														c:\program files (x86)\microsoft\microsoft search in bing\microsoftsearchinbing.exe	6672			C:\Program Files (x86)\Microsoft\Microsoft Search in Bing\MicrosoftSearchInBing.exe				2aad7e89-3b68-0002-a883-ad2a683bdd01	NT AUTHORITY\SYSTEM	S-1-5-18																																											FALSE	
8ad10222-be1f-4fba-9d0a-8f739eb2c3e0	3077	Block	51:08.0	Microsoft-Windows-CodeIntegrity/Operational	code_integrity	f9f55d92-451d-4115-b37b-35976929e0ff	MF-D25401.MAHFSL.COM	MF-D25401.MAHFSL.COM	1	System Activity	1007	Process Activity	1	Launch	100701	Process Activity: Launch	4	High	FALSE	TRUE		0xc0e90002	NLog.dll	c:\program files (x86)\microsoft\microsoft search in bing\nlog.dll	8907FA618F51C88810FBE940AF934B63879EA1E47126780995335DADE975CC72	58DA13D8C43225E09377111106D4B948E39B7657		NLog for .NET Framework 4.5	NLog v4.6.7	4.6.7.10445	NLog.dll	NLog.dll	TRUE		Unsigned	Unknown	Unknown			FC28058AB7F822CAC4D86CBB6266706152DB01E07A0C71A6FFDD43D4E1B5E272	E341DFDE4ECAC91F9130E74C48A6E00C58BA1CCC		2	1			c:\program files (x86)\microsoft\microsoft search in bing\microsoftsearchinbing.exe	6672			C:\Program Files (x86)\Microsoft\Microsoft Search in Bing\MicrosoftSearchInBing.exe				2aad7e89-3b68-0002-a883-ad2a683bdd01	NT AUTHORITY\SYSTEM	S-1-5-18						{07d5f004-4f0c-4d87-84ff-1aaa50b0446e}	MMFSL-P																																				FALSE