- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="volmgr" />
  <EventID Qualifiers="49156">161</EventID>
  <Level>2</Level>
  <Task>0</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2019-10-17T15:19:21.422987900Z" />
  <EventRecordID>5747</EventRecordID>
  <Channel>System</Channel>
  <Computer>DESKTOP-93OV4UD</Computer>
  <Security />
  </System>
- <EventData>
  <Data>\Device\HarddiskVolume4</Data>
  <Binary>000000000100000000000000A10004C000000400010000C000000000000000000000000000000000</Binary>
  </EventData>
  </Event>