Advertisement
Guest User

Untitled

a guest
Aug 27th, 2016
156
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.26 KB | None | 0 0
  1. <QueryList>
  2. <Query Id="0" Path="Security">
  3. <Select Path="Security">*[System/Provider[@Name='Microsoft-Windows-Security-Auditing'] and EventData/Data[@Name='DeviceID']='DISPLAY\DELA02C\4&amp;53C4C18&amp;0&amp;UID200195']</Select>
  4. </Query>
  5. </QueryList>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement