ElfFilejElfChnkȰn/KNameShareLocalPath A=oData%KName OldRemark A=oData%KName NewRemark AAoData)KName OldMaxUsers AAoData)KName NewMaxUsers AEoData-KName OldShareFlags AEoData-KName NewShareFlags A5oDataKNameOldSD A5oDataKNameNewSD xxy@ydyyyyyyz$zDzdztz$SubjectUserSid$SubjectUserName(SubjectDomainName$SubjectLogonIdObjectTypeShareName$ShareLocalPathOldRemarkNewRemarkOldMaxUsersNewMaxUsers OldShareFlags NewShareFlagsOldSDNewSDjjg=X=XventDataAGoData/KNameSubjectUserSid AIoData1KNameSubjectUserName AMoData5KNameSubjectDomainName AGoData/KNameSubjectLogonId A?oData'KName ObjectType A=oData%KName IpAddress A7oDataKNameIpPort A=oData%KName ShareName AGoData/KNameShareLocalPath AOoData7KNameRelativeTargetName A?oData'KName AccessMask A?oData'KName AccessList ACoData+KName AccessReason (Lt̃Hd$SubjectUserSid$SubjectUserName(SubjectDomainName$SubjectLogonIdObjectTypeIpAddressIpPortShareName$ShareLocalPath,RelativeTargetNameAccessMaskAccessList AccessReasonKJ*gD EventDataAGoData/KNameSubjectUserSid AIoData1KNameSubjectUserName AMoData5KNameSubjectDomainName AGoData/KNameSubjectLogonId A9oData!KNameSpnName A=oData%KName ErrorCode AAoData)KName ServerNames AIoData1KNameConfiguredNames AAoData)KName IpAddresses Hl܈$H$SubjectUserSid$SubjectUserName(SubjectDomainName$SubjectLogonIdSpnNameErrorCodeServerNames$ConfiguredNamesIpAddressesNMfe>X=XventDataAGoData/KNameSubjectUserSid AIoData1KNameSubjectUserName AMoData5KNameSubjectDomainName AGoData/KNameSubjectLogonId ܍($SubjectUserSid$SubjectUserName(SubjectDomainName$SubjectLogonIdA@gfD EventDataAGoData/KNameSubjectUserSid AIoData1KNameSubjectUserName AMoData5KNameSubjectDomainName AGoData/KNameSubjectLogonId A9oData!KNamePackage A9oData!KNameUserUPN ACoData+KName TargetServer A;oData#KNameCredType Б0Dd$SubjectUserSid$SubjectUserName(SubjectDomainName$SubjectLogonIdPackageUserUPN TargetServerCredTypeKKg0X>X=XventDataAGoData/KNameSubjectUserSid AIoData1KNameSubjectUserName AMoData5KNameSubjectDomainName AGoData/KNameSubjectLogonId AEoData-KName TransactionId A;oData#KNameNewState AIoData1KNameResourceManager A=oData%KName ProcessId AAoData)KName ProcessName (Lpܖ0$SubjectUserSid$SubjectUserName(SubjectDomainName$SubjectLogonId TransactionIdNewState$ResourceManagerProcessIdProcessNamehiGgD EventDataAGoData/KNameSubjectUserSid AIoData1KNameSubjectUserName AMoData5KNameSubjectDomainName AGoData/KNameSubjectLogonId  A=oData%KName ProcessId AAoData)KName ProcessName AIoData1KNameRemoteIpAddress A?oData'KName RemotePort AEoData-KName InterfaceUuid AKoData3KNameProtocolSequence AUoData=KNameAuthenticationService AQoData9KNameAuthenticationLevel @d Ԝ,Hh$SubjectUserSid$SubjectUserName(SubjectDomainName$SubjectLogonIdProcessIdProcessName$RemoteIpAddressRemotePort InterfaceUuid(ProtocolSequence0AuthenticationService,AuthenticationLevelmlf D EventDataA3oDataKNameSSID A;oData#KNameIdentity AIoData1KNameSubjectUserName AMoData5KNameSubjectDomainName AGoData/KNameSubjectLogonId A9oData!KNamePeerMac A;oData#KNameLocalMac A;oData#KNameIntfGuid A?oData'KName ReasonCode A?oData'KName ReasonText A=oData%KName ErrorCode AEoData-KName EAPReasonCode AOoData7KNameEapRootCauseString ACoData+KName EAPErrorCode  0D\tĩSSIDIdentity$SubjectUserName(SubjectDomainName$SubjectLogonIdPeerMacLocalMacIntfGuidReasonCodeReasonTextErrorCode EAPReasonCode,EapRootCauseString EAPErrorCoderf>X =XventDataAEoData-KName InterfaceName A;oData#KNameIdentity AIoData1KNameSubjectUserName AMoData5KNameSubjectDomainName AGoData/KNameSubjectLogonId A?oData'KName ReasonCode A?oData'KName ReasonText A=oData%KName ErrorCode p̭4P InterfaceNameIdentity$SubjectUserName(SubjectDomainName$SubjectLogonIdReasonCodeReasonTextErrorCodeg]=X0=XventDataAAoData)KName ProviderKey ACoData+KName ProviderName A?oData'KName CalloutKey AAoData)KName CalloutName AAoData)KName CalloutType A=oData%KName CalloutId A;oData#KNameLayerKey A=oData%KName LayerName A9oData!KNameLayerId ܱ4PlProviderKey ProviderNameCalloutKeyCalloutNameCalloutTypeCalloutIdLayerKeyLayerNameLayerIdggg>XL=XventDataAAoData)KName ProviderKey ACoData+KName ProviderName A=oData%KName FilterKey A?oData'KName FilterName A?oData'KName FilterType A;oData#KNameFilterId  A;oData#KNameLayerKey A=oData%KName LayerName A9oData!KNameLayerId A7oDataKNameWeight A?oData'KName Conditions A7oDataKNameAction A?oData'KName CalloutKey AAoData)KName CalloutName $<X t и0ProviderKey ProviderNameFilterKeyFilterNameFilterTypeFilterIdLayerKeyLayerNameLayerIdWeightConditionsActionCalloutKeyCalloutNamegD EventDataAAoData)KName ProviderKey ACoData+KName ProviderName ACoData+KName ProviderType кProviderKey ProviderName ProviderType/.f D EventDataAAoData)KName ProviderKey ACoData+KName ProviderName AOoData7KNameProviderContextKey AQoData9KNameProviderContextName AQoData9KNameProviderContextType \xĽProviderKey ProviderName,ProviderContextKey,ProviderContextName,ProviderContextTypef>Xa=XventDataAAoData)KName ProviderKey ACoData+KName ProviderName AAoData)KName SubLayerKey ACoData+KName SubLayerName ACoData+KName SubLayerType A7oDataKNameWeight (ProviderKey ProviderNameSubLayerKey SubLayerName SubLayerTypeWeight`ag D EventDataA=oData%KName ProcessId A9oData!KNameUserSid A;oData#KNameUserName AAoData)KName ProviderKey ACoData+KName ProviderName A?oData'KName ChangeType A?oData'KName CalloutKey AAoData)KName CalloutName AAoData)KName CalloutType A=oData%KName CalloutId A;oData#KNameLayerKey A=oData%KName LayerName A9oData!KNameLayerId  $8Pl,DProcessIdUserSidUserNameProviderKey ProviderNameChangeTypeCalloutKeyCalloutNameCalloutTypeCalloutIdLayerKeyLayerNameLayerIdcD EventDataA=oData%KName ProcessId A9oData!KNameUserSid A;oData#KNameUserName AAoData)KName ProviderKey ACoData+KName ProviderName A?oData'KName ChangeType A=oData%KName FilterKey A?oData'KName FilterName A?oData'KName FilterType A;oData#KNameFilterId A;oData#KNameLayerKey A=oData%KName LayerName A9oData!KNameLayerId A7oDataKNameWeight A?oData'KName Conditions A7oDataKNameAction A?oData'KName CalloutKey AAoData)KName CalloutName 4Tp  0L`|ProcessIdUserSidUserNameProviderKey ProviderNameChangeTypeFilterKeyFilterNameFilterTypeFilterIdLayerKeyLayerNameLayerIdWeightConditionsActionCalloutKeyCalloutNameegc=X=XventDataA=oData%KName ProcessId A9oData!KNameUserSid A;oData#KNameUserName A?oData'KName ChangeType AAoData)KName ProviderKey ACoData+KName ProviderName ACoData+KName ProviderType \tProcessIdUserSidUserNameChangeTypeProviderKey ProviderName ProviderTypeKJgD EventDataA=oData%KName ProcessId A9oData!KNameUserSid A;oData#KNameUserName AAoData)KName ProviderKey ACoData+KName ProviderName A?oData'KName ChangeType AOoData7KNameProviderContextKey AQoData9KNameProviderContextName AQoData9KNameProviderContextType  @\ProcessIdUserSidUserNameProviderKey ProviderNameChangeType,ProviderContextKey,ProviderContextName,ProviderContextTypeLLtg=X=XventDataA=oData%KName ProcessId A9oData!KNameUserSid A;oData#KNameUserName AAoData)KName ProviderKey ACoData+KName ProviderName A?oData'KName ChangeType AAoData)KName SubLayerKey ACoData+KName SubLayerName ACoData+KName SubLayerType A7oDataKNameWeight 0LhProcessIdUserSidUserNameProviderKey ProviderNameChangeTypeSubLayerKey SubLayerName SubLayerTypeWeight8g 4D EventDataACoData+KName LocalAddress AKoData3KNameLocalAddressMask A=oData%KName LocalPort AQoData9KNameLocalTunnelEndpoint AEoData-KName RemoteAddress AMoData5KNameRemoteAddressMask A?oData'KName RemotePort AOoData7KNamePeerPrivateAddress ASoData;KNameRemoteTunnelEndpoint A?oData'KName IpProtocol AKoData3KNameKeyingModuleName A?oData'KName AhAuthType AAoData)KName EspAuthType A?oData'KName CipherType AIoData1KNameLifetimeSeconds AMoData5KNameLifetimeKilobytes AIoData1KNameLifetimePackets A3oDataKNameMode A3oDataKNameRole AMoData5KNameTransportFilterId  ACoData+KName MainModeSaId  AEoData-KName QuickModeSaId  A?oData'KName InboundSpi  AAoData)KName OutboundSpi  $Ld Pl 4Xh x     LocalAddress(LocalAddressMaskLocalPort,LocalTunnelEndpoint RemoteAddress(RemoteAddressMaskRemotePort,PeerPrivateAddress0RemoteTunnelEndpointIpProtocol(KeyingModuleNameAhAuthTypeEspAuthTypeCipherType$LifetimeSeconds(LifetimeKilobytes$LifetimePacketsModeRole(TransportFilterId MainModeSaId QuickModeSaIdInboundSpiOutboundSpidf D EventDataACoData+KName LocalAddress AKoData3KNameLocalAddressMask A=oData%KName LocalPort AQoData9KNameLocalTunnelEndpoint AEoData-KName RemoteAddress AMoData5KNameRemoteAddressMask A?oData'KName RemotePort AOoData7KNamePeerPrivateAddress ASoData;KNameRemoteTunnelEndpoint A?oData'KName IpProtocol AKoData3KNameKeyingModuleName A?oData'KName AhAuthType AAoData)KName EspAuthType A?oData'KName CipherType AIoData1KNameLifetimeSeconds AMoData5KNameLifetimeKilobytes AIoData1KNameLifetimePackets A3oDataKNameMode A3oDataKNameRole AMoData5KNameTransportFilterId  ACoData+KName MainModeSaId  AEoData-KName QuickModeSaId  A?oData'KName InboundSpi  AAoData)KName OutboundSpi  A;oData#KNameTunnelId  AMoData5KNameTrafficSelectorId   @h<l(Pt      4 L LocalAddress(LocalAddressMaskLocalPort,LocalTunnelEndpoint RemoteAddress(RemoteAddressMaskRemotePort,PeerPrivateAddress0RemoteTunnelEndpointIpProtocol(KeyingModuleNameAhAuthTypeEspAuthTypeCipherType$LifetimeSeconds(LifetimeKilobytes$LifetimePacketsModeRole(TransportFilterId MainModeSaId QuickModeSaIdInboundSpiOutboundSpiTunnelId(TrafficSelectorIdDE`~D EventDataACoData+KName LocalAddress A=oData%KName LocalPort AQoData9KNameLocalTunnelEndpoint AEoData-KName RemoteAddress A?oData'KName RemotePort ASoData;KNameRemoteTunnelEndpoint A?oData'KName IpProtocol AEoData-KName QuickModeSaId  ,Lh  LocalAddressLocalPort,LocalTunnelEndpoint RemoteAddressRemotePort0RemoteTunnelEndpointIpProtocol QuickModeSaId^ TV`R=Xd=XventDataACoData+KName LocalAddress AKoData3KNameLocalAddressMask A=oData%KName LocalPort AQoData9KNameLocalTunnelEndpoint AEoData-KName RemoteAddress AMoData5KNameRemoteAddressMask A?oData'KName RemotePort ASoData;KNameRemoteTunnelEndpoint A?oData'KName IpProtocol AEoData-KName QuickModeSaId A;oData#KNameTunnelId AMoData5KNameTrafficSelectorId @`   ( LocalAddress(LocalAddressMaskLocalPort,LocalTunnelEndpoint Remo