Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <QueryList>
- <Query Id="0" Path="Security">
- <Select Path="Security">*[System/Provider[@Name='Microsoft-Windows-Security-Auditing'] and EventData/Data[@Name='DeviceID']='DISPLAY\DELA02C\4&53C4C18&0&UID200195']</Select>
- </Query>
- </QueryList>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement